PT-2018-17042

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 11.6.0 through 11.6.3 Description The issue concerns the use of an insecure AES ECB mode for the orig uri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile. This allows a...

PT-2016-5659

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 F5 Edge Gateway version 11.2.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved vi...