SOL16090 - BIG-IP Automatic Update Check and ASM Automatic Signature Update man-in-the-middle vulnerability CVE-2014-9326

2015-04-2900:00:00

support.f5.com

0.001 Low

EPSS

Percentile

49.8%

JSON

The BIG-IP Phone Home and ASM Call Home automatic signature update functionality is susceptible to Man-in-the-Middle type attacks due to improper validation of server SSL certificates. (CVE-2014-9326)

CPENameOperatorVersion
big-ip ltmle11.6.0
big-ip link controllerle11.6.0
big-ip apmle11.6.0
big-ip analyticsle11.6.0
big-ip gtmle11.6.0
big-ip pemle11.6.0
big-ip asmle11.6.0
big-ip afmle11.6.0
big-ip aamle11.6.0

Name	Operator	Version
big-ip ltm	le	11.6.0
big-ip link controller	le	11.6.0
big-ip apm	le	11.6.0
big-ip analytics	le	11.6.0
big-ip gtm	le	11.6.0
big-ip pem	le	11.6.0
big-ip asm	le	11.6.0
big-ip afm	le	11.6.0
big-ip aam	le	11.6.0