Lucene search

K
f5F5SOL16903
HistoryJul 13, 2015 - 12:00 a.m.

SOL16903 - Microsoft Schannel vulnerability CVE-2015-1637

2015-07-1300:00:00
support.f5.com
108

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.965 High

EPSS

Percentile

99.5%

1 BIG-IP Edge Client for Windows uses Schannel.dll directly and indirectly (through WinINet) for HTTPS communication with Microsoft Windows. F5 recommends that users apply the applicable Microsoft update posted at <https://technet.microsoft.com/en-us/library/security/ms15-031.aspx&gt;**.******This link takes you to a resource outside of AskF5, and the third party could remove the document without our knowledge.

Vulnerability Recommended Actions

If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version in the column, then no upgrade candidate currently exists.

Supplemental Information

  • SOL9970: Subscribing to email notifications regarding F5 products
  • SOL9957: Creating a custom RSS feed to view new and updated documents
  • SOL4602: Overview of the F5 security vulnerability response policy
  • SOL4918: Overview of the F5 critical issue hotfix policy

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.965 High

EPSS

Percentile

99.5%