PT-2017-10510 · F5 · F5 Ssl Intercept Iapp+1

Published 2017-04-06 · Updated 2019-10-03 · CVE-2017-0305

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 SSL Intercept iApp versions 1.5.0 through 1.5.7

Description The issue allows for an unauthenticated, remote attack. This may enable modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic.

Recommendations For F5 SSL Intercept iApp versions 1.5.0 through 1.5.7, consider disabling the Explicit Proxy feature with SNAT Auto Map option for egress traffic until a patch is available. Restrict access to sensitive system files and configuration to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2017-0305

Affected Products

Big-Ip

F5 Ssl Intercept Iapp

References · 3

• https://support.f5.com/csp/article/K53244431 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0305 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0305 · Vendor Advisory