K22317030 : iControl REST vulnerability CVE-2017-6145

Security Advisory Description

iControl REST includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens. (CVE-2017-6145)
Impact
An attacker with an expired BIG-IP authentication cookie can use it to get valid iControl REST authentication tokens in order to gain access to the iControl REST interface of the BIG-IP system.