SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929

2012-12-0500:00:00

support.f5.com

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.9%

JSON

Vulnerability Recommended Actions

To eliminate this vulnerability, perform one of the following actions:

Upgrade to a software version that is listed in the Versions known to be Not Vulnerable column of the table.
Upgrade your client browser to a non-vulnerable version.

Supplemental Information

SOL14059: CRIME vulnerability via the SPDY protocol CVE-2012-4929
SOL9970: Subscribing to email notifications regarding F5 products
SOL9957: Creating a custom RSS feed to view new and updated documents
SOL4602: Overview of the F5 security vulnerability response policy
The following link will take you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge:

Common Vulnerabilities and Exposures (CVE-2012-4929)

CPENameOperatorVersion
big-ip apmle11.2.1
big-ip webacceleratorle11.2.1
big-ip womle11.2.1
big-ip psmle11.2.1
arxle6.4.0
big-ip gtmle11.2.1
big-ip edge gateway
le11.2.1
enterprise managerle3.0.0
big-ip link controllerle11.2.1
big-ip ltmle11.2.1

Name	Operator	Version
big-ip apm	le	11.2.1
big-ip webaccelerator	le	11.2.1
big-ip wom	le	11.2.1
big-ip psm	le	11.2.1
arx	le	6.4.0
big-ip gtm	le	11.2.1
big-ip edge gateway	le	11.2.1
enterprise manager	le	3.0.0
big-ip link controller	le	11.2.1
big-ip ltm	le	11.2.1