CVE-2014-9326

First published: Tue May 12 2015(Updated: )

The automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the (2) Call Home feature in ASM 10.0.0 through 11.6.0 and PEM 11.3.0 through 11.6.0 does not properly validate server SSL certificates, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/severity
• agent/author
• agent/references
• agent/type
• agent/description
• agent/event
• agent/tags
• agent/softwarecombine
• agent/last-modified-date
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• vendor/f5
• canonical/f5 big-ip application acceleration manager
• version/f5 big-ip application acceleration manager/11.5.0
• version/f5 big-ip application acceleration manager/11.5.1
• version/f5 big-ip application acceleration manager/11.5.2
• version/f5 big-ip application acceleration manager/11.6.0
• canonical/f5 big-ip policy enforcement manager
• version/f5 big-ip policy enforcement manager/11.3.0
• version/f5 big-ip policy enforcement manager/11.4.0
• version/f5 big-ip policy enforcement manager/11.4.1
• version/f5 big-ip policy enforcement manager/11.5.0
• version/f5 big-ip policy enforcement manager/11.5.2
• version/f5 big-ip policy enforcement manager/11.6.0
• canonical/f5 big-ip policy enforcement manager11.5.1
• canonical/f5 big-ip global traffic manager
• version/f5 big-ip global traffic manager/11.5.0
• version/f5 big-ip global traffic manager/11.5.1
• version/f5 big-ip global traffic manager/11.5.2
• version/f5 big-ip global traffic manager/11.6.0
• canonical/f5 big-ip advanced firewall manager
• version/f5 big-ip advanced firewall manager/11.5.0
• version/f5 big-ip advanced firewall manager/11.5.1
• version/f5 big-ip advanced firewall manager/11.5.2
• version/f5 big-ip advanced firewall manager/11.6.0
• canonical/f5 big-ip local traffic manager
• version/f5 big-ip local traffic manager/11.5.0
• version/f5 big-ip local traffic manager/11.5.1
• version/f5 big-ip local traffic manager/11.5.2
• version/f5 big-ip local traffic manager/11.6.0
• canonical/f5 big-ip application security manager
• version/f5 big-ip application security manager/11.5.0
• version/f5 big-ip application security manager/11.5.1
• version/f5 big-ip application security manager/11.5.2
• version/f5 big-ip application security manager/11.6.0
• canonical/f5 big-ip link controller
• version/f5 big-ip link controller/11.5.0
• version/f5 big-ip link controller/11.5.1
• version/f5 big-ip link controller/11.5.2
• version/f5 big-ip link controller/11.6.0
• canonical/f5 big-ip access policy manager
• version/f5 big-ip access policy manager/11.5.0
• version/f5 big-ip access policy manager/11.5.1
• version/f5 big-ip access policy manager/11.5.2
• version/f5 big-ip access policy manager/11.6.0
• canonical/f5 big-ip analytics
• version/f5 big-ip analytics/11.5.0
• version/f5 big-ip analytics/11.5.1
• version/f5 big-ip analytics/11.5.2
• version/f5 big-ip analytics/11.6.0