CVE-2017-6145

CVE-2017-6145 affects F5 BIG-IP products with iControl REST. The issue arises in the service that converts BIGIPAuthCookie cookies to X-F5-Auth-Token tokens, failing to re-validate cookies during conversion. This allows an expired, previously valid cookie to be converted into a valid token, enabl...

CVE-2017-6141

F5 BIG-IP K21154730 documents CVE-2017-6141: a TLS abbreviated handshake issue when a Client SSL profile has Session Ticket enabled may disrupt TMM. Affected families include BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0–12.1.2, where the Session Ticket option is enable...

F5 Networks BIG-IP : SafeNet External Network HSM script vulnerability (K74759095)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between...

F5 BIG-IP systems Traffic Management Microkernel Denial of Service Vulnerability

F5 BIG-IP systems is an application delivery product that integrates network traffic management, application security management, and load balancing. A security vulnerability in the F5 BIG-IP systems Traffic Management Microkernel could be exploited by remote attackers to submit specially crafted...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2017-34621)

F5 BIG-IP Analytics and others are products of F5 Corporation in the U.S. F5 BIG-IP Analytics is a suite of Web application performance analytics software. the APM is a suite of solutions that provide secure and unified access to business-critical applications and networks. and the LTM is a local...

F5 Networks BIG-IP : Expat vulnerability (K52320548)

An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

Design/Logic Flaw

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

CVE-2017-6147

CVE-2017-6147 affects F5 BIG-IP products (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe, and others) where enabling SSL Forward Proxy on both Client and Server SSL profiles can cause TMM to restart and interrupt traffic. The F5 advisory K43945001 lists multiple vulnerable...

F5 Networks BIG-IP : F5 TMM vulnerability (K43945001)

An undisclosed type of responses may cause TMM to restart, causing an interruption of service when 'SSL Forward Proxy' setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server. CVE-2017-6147 Impact If the SSL Forward Proxy option is enabled on both the...

XSStrike: A XSS Detection & Exploitation Kit

PenTestIT RSS Feed If you remember a couple of weeks back, I blogged about XSS Radar, a Google Chrome extension to help you discover cross-site scripting vulnerabilities. This post is about - XSStrike, a similar tool to help you find cross-site scripting vulnerabilities, but it is coded in Python...

F5 Networks BIG-IP Edge Client: session ID vulnerability (K06635145)

The version of the Big-IP Edge Client installed on the remote Windows host is in the range 7071.x through 7132.x. It is, therefore, affected by a flaw in the BIG-IP Edge Client that exposes the current session ID as part of the request URI when sending Keep-Alive requests over an SSL channel. Thi...

http-bigip-cookie NSE Script

Decodes any unencrypted F5 BIG-IP cookies in the HTTP response. BIG-IP cookies contain information on backend systems such as internal IP addresses and port numbers. See here for more info: Script Arguments http-bigip-cookie.path The URL path to request. The default path is "/". slaxml.debug See...

PHP vulnerabilities CVE-2017-9226 and CVE-2017-7890

F5 Product Development has evaluated the currently supported releases for potential vulnerability. To determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the...

F5 BIG-IP - Azure cloud vulnerability CVE-2017-6131

In some circumstances, a BIG-IP Azure cloud instance may contain a default administrative password which can be used to remotely log in to the BIG-IP system. The affected administrative account is the Azure instance administrative user created at deployment. The root and admin accounts are not...

F5 Networks BIG-IP : OpenJDK vulnerability (K17175)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. CVE-2015-4731 C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : Python and Jython vulnerability (K53192206)

REJECT Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service memory consumption via a long string, related to 1 httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; 2 ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; 3 imaplib - not yet fixed i...

F5 Networks BIG-IP : Python and Jython vulnerability (K78825687)

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a 'buffer' function. CVE-2014-7185 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...