CVE-2017-6144

CVE-2017-6144 affects F5 BIG-IP PEM 12.1.0–12.1.2, where downloading the TAC database over HTTPS does not verify the server certificate. This enables potential man‑in‑the‑middle tampering or information disclosure by an attacker in a privileged network position. Affected components rely on TAC da...

CVE-2017-6145

CVE-2017-6145 affects F5 BIG-IP products with iControl REST. The issue arises in the service that converts BIGIPAuthCookie cookies to X-F5-Auth-Token tokens, failing to re-validate cookies during conversion. This allows an expired, previously valid cookie to be converted into a valid token, enabl...

CVE-2017-6165

CVE-2017-6165 affects multiple F5 BIG-IP products (LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe, on VIPRION) via the safenet-sync.sc script. The vulnerability is that the script in clustered deployments logs the SafeNet HSM partition password in cleartext to /var/lo...

CVE-2017-6141

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel TMM. The Sessio...

CVE-2017-6165

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between...

CVE-2017-6144

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code TAC database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in...

CVE-2017-6145

iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that...

CVE-2017-6141

F5 BIG-IP K21154730 documents CVE-2017-6141: a TLS abbreviated handshake issue when a Client SSL profile has Session Ticket enabled may disrupt TMM. Affected families include BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0–12.1.2, where the Session Ticket option is enable...

PT-2017-16924

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 HF6 through 11.5.4 HF4 F5 BIG-IP versions 11.6.0 through 11.6.1 HF1 F5 BIG-IP versions 12.0.0 through 12.1.2 Description The issue concerns the logging of sensitive information. In clustered deployments on VIPRION...

PT-2017-16914

Name of the Vulnerable Software and Affected Versions F5 BIG-IP PEM versions 12.1.0 through 12.1.2 Description The issue concerns a lack of server certificate verification when downloading the Type Allocation Code TAC database file via HTTPS. This could allow attackers in a privileged network...

CVE-2017-6144: Improper Certificate Validation

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code TAC database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in...

CVE-2017-6141: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel TMM. The Sessio...

CVE-2017-6165: Insertion of Sensitive Information into Log File

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between...

PT-2017-16913

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.2 Description The issue affects F5 BIG-IP when using a client SSL profile with the Session Ticket option enabled, which can cause disruption of service to the Traffic Management Microkernel TMM due to...

CVE-2017-6145: Insufficient Session Expiration

iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that...

F5 Networks BIG-IP : SafeNet External Network HSM script vulnerability (K74759095)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between...

F5 Networks BIG-IP : Expat vulnerability (K52320548)

An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the permission of the user...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

Design/Logic Flaw

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...