F5-K43881487: High severity f5 big-ip and big-iq centralized management vulnerability
When an HTTP profile with the non-default Enforcement options Enforce RFC Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K43881487?
The F5-K43881487 vulnerability is considered critical due to its potential to terminate the Traffic Management Microkernel.
How do I fix F5-K43881487?
To fix F5-K43881487, update your F5 BIG-IP to the recommended versions specified in the advisory.
What causes the F5-K43881487 vulnerability?
F5-K43881487 is caused by misconfigurations in HTTP profile settings that reject unknown methods.
Is my system affected by F5-K43881487?
If you are using F5 BIG-IP versions 17.0.0, 16.1.3, or any earlier version, your system may be affected by F5-K43881487.
What are the implications of F5-K43881487?
Exploitation of F5-K43881487 may lead to unexpected system outages due to the termination of the TMM.