2 matches found
CVE-2016-5736: Improper Access Control
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before...
7.5CVSS7.3AI score0.02267EPSS
SaveExploits0References2
F5 Networks BIG-IP : BIG-IP IPsec IKE peer listener vulnerability (K10133477)
The anonymous IPsec IKE peer configuration object is present and enabled in the default configuration. The settings of the anonymous IPsec IKE peer object allow an arbitrary peer to establish IKE phase 1 without certificate validation or a pre-shared key which may expose phase 2 negotiations to a...
7.5CVSS7.2AI score0.02267EPSS
SaveExploits0References2
20