CVE-2014-8730
Summary
| CVE | CVE-2014-8730 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-12-10 00:59:01 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:M/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | F5 | Big-ip Access Policy Manager | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.0.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.0.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.0.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.0.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.0.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.0.1 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.0.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.0.1 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.0.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.0.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.1.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.2.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.2.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.2.2 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.2.3 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 10.2.4 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.3.0 | All | All | All |
| Application | F5 | Big-iq Cloud | 4.0.0 | All | All | All |
| Application | F5 | Big-iq Cloud | 4.1.0 | All | All | All |
| Application | F5 | Big-iq Cloud | 4.2.0 | All | All | All |
| Application | F5 | Big-iq Cloud | 4.3.0 | All | All | All |
| Application | F5 | Big-iq Cloud | 4.4.0 | All | All | All |
| Application | F5 | Big-iq Device | 4.2.0 | All | All | All |
| Application | F5 | Big-iq Device | 4.3.0 | All | All | All |
| Application | F5 | Big-iq Device | 4.4.0 | All | All | All |
| Application | F5 | Big-iq Security | 4.0.0 | All | All | All |
| Application | F5 | Big-iq Security | 4.1.0 | All | All | All |
| Application | F5 | Big-iq Security | 4.2.0 | All | All | All |
| Application | F5 | Big-iq Security | 4.3.0 | All | All | All |
| Application | F5 | Big-iq Security | 4.4.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Bulletin: TLS padding vulnerability affects IBM Sterling Connect:Direct for Microsoft Windows (CVE-2014-8730) | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| Security Bulletin: TLS padding vulnerability affects Communications Server for Windows (CVE-2014-8730) | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| POODLE: SSLv3 Vulnerability - Lenovo Support (US) | af854a3a-2127-422b-91ae-364da2661108 | support.lenovo.com | |
| Security Bulletin: TLS padding vulnerability affects Sterling Connect:Direct for UNIX (CVE-2014-8730) | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| '[security bulletin] HPSBPV03516 rev.1 - HP VAN SDN Controller, Multiple Vulnerabilities' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| ImperialViolet - The POODLE bites again | af854a3a-2127-422b-91ae-364da2661108 | www.imperialviolet.org | |
| CVE-2014-8730 Padding issue | af854a3a-2127-422b-91ae-364da2661108 | devcentral.f5.com | Vendor Advisory |
| oss-security - Re: CVE question: Return of POODLE | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| HPE Support document - HPE Support Center | af854a3a-2127-422b-91ae-364da2661108 | h20564.www2.hpe.com | |
| Security Advisory SA62224 - IBM Sterling Connect:Direct for Windows TLS Version 1.x CBC Cipher Padding Information Disclosure Security Issue - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| POODLE: SSLv3 Vulnerability - US | af854a3a-2127-422b-91ae-364da2661108 | support.lenovo.com | |
| Security Advisory SA62167 - IBM Sterling Connect:Direct for UNIX TLS Version 1.x CBC Cipher Padding Information Disclosure Security Issue - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SOL15882 - TLS1.x padding vulnerability CVE-2014-8730 | af854a3a-2127-422b-91ae-364da2661108 | support.f5.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590920 ABB Relion 650 series Secure Sockets Layer (SSL) 3.0 Protocol and POODLE Attack Multiple Vulnerabilities (ABB-VU-PSAC-1MRG018009)