K20087443: BIG-IP APM VPN vulnerability CVE-2017-6129

Security Advisory Description In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or...

PT-2017-9192

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.5.4 through 11.5.4 HF2 F5 BIG-IP APM versions 11.6.0 through 11.6.1 HF1 F5 BIG-IP APM versions 12.0.0 through 12.1.1 Description The TMM SSO plugin in F5 BIG-IP APM, when configured as a SAML Identity Provider with a...