CVE-2017-6142: Medium severity f5 big-ip advanced firewall manager vulnerability
X509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6142?
CVE-2017-6142 has been rated as High severity due to the potential for unauthorized access resulting from improper certificate verification.
How do I fix CVE-2017-6142?
To fix CVE-2017-6142, update your F5 BIG-IP Advanced Firewall Manager to the latest patched version that addresses this vulnerability.
Which versions of F5 BIG-IP Advanced Firewall Manager are affected by CVE-2017-6142?
CVE-2017-6142 affects F5 BIG-IP Advanced Firewall Manager versions 11.6.0 to 11.6.2, 12.1.0 to 12.1.2, and 13.0.0.
What risks are associated with CVE-2017-6142?
The risks associated with CVE-2017-6142 include the possibility of man-in-the-middle attacks due to improper server identity validation.
Is there a workaround for CVE-2017-6142 if I cannot update immediately?
There are no documented workarounds for CVE-2017-6142, and the recommended action is to apply the security update as soon as possible.