K53244431: SSL Intercept iApp HTTP Explicit Proxy vulnerability CVE-2017-0305

SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus...

CVE-2017-0305

The CVE affects F5 SSL Intercept iApp templates (versions 1.5.0–1.5.7) used with BIG-IP devices. A remote, unauthenticated attacker can modify the BIG-IP configuration, exfiltrate sensitive files, and possibly execute commands when the iApp is deployed with the Explicit Proxy feature and SNAT Aut...

CVE-2017-0305

F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature...