PT-2017-16903 · F5 · F5 Ssl Intercept Iapp+1

Publicado 2017-04-06 · Atualizado 2017-04-12 · CVE-2017-6130

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions F5 SSL Intercept iApp versions 1.5.0 through 1.5.7 F5 SSL Orchestrator version 2.0

Description The issue allows for a Server-Side Request Forgery (SSRF) attack. This occurs when the Dynamic Domain Bypass (DDB) feature is used along with the SNAT Auto Map option for egress traffic.

Recommendations For F5 SSL Intercept iApp versions 1.5.0 through 1.5.7, consider disabling the Dynamic Domain Bypass (DDB) feature or the SNAT Auto Map option as a temporary workaround until a patch is available. For F5 SSL Orchestrator version 2.0, restrict the use of the DDB feature with SNAT Auto Map to minimize the risk of exploitation.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2017-6130

Produtos afetados

F5 Ssl Intercept Iapp

F5 Ssl Orchestrator

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-6130 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6130 · Nota de Segurança
• https://support.f5.com/csp/article/K23001529 · Aviso do Fabricante