CVE-2017-6143

2018-04-1200:00:00

www.cve.org

0.001 Low

EPSS

Percentile

36.5%

JSON

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server’s identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.

CNA Affected

[
  {
    "product": "BIG-IP (AFM, ASM)",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "12.0.0-12.1.2"
      },
      {
        "status": "affected",
        "version": "11.6.0-11.6.2"
      },
      {
        "status": "affected",
        "version": "11.5.0-11.5.5"
      }
    ]
  }
]

References

support.f5.com/csp/article/K11464209

0.001 Low

EPSS

Percentile

36.5%

JSON

Related for CVELIST:CVE-2017-6143