Multiple F5 BIG-IP Products SSL Certificate Validation Multiple Security Bypass Vulnerabilities
BID:74650
Info
Multiple F5 BIG-IP Products SSL Certificate Validation Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 74650 |
| Class: | Unknown |
| CVE: |
CVE-2014-9326 |
| Remote: | Yes |
| Local: | No |
| Published: | May 12 2015 12:00AM |
| Updated: | May 12 2015 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
F5 BIG-IP Policy Enforcement Manager 11.6 F5 BIG-IP Policy Enforcement Manager 11.5.2 F5 BIG-IP Policy Enforcement Manager 11.5.1 F5 BIG-IP Policy Enforcement Manager 11.5 F5 BIG-IP Policy Enforcement Manager 11.4.1 F5 BIG-IP Policy Enforcement Manager 11.4 F5 BIG-IP Policy Enforcement Manager 11.3 F5 BIG-IP Local Traffic Manager 11.6 F5 BIG-IP Local Traffic Manager 11.5.2 F5 BIG-IP Local Traffic Manager 11.5 F5 BIG-IP Link Controller 11.6 F5 BIG-IP Link Controller 11.5.2 F5 BIG-IP Link Controller 11.5.1 F5 BIG-IP Link Controller 11.5 F5 BIG-IP Global Traffic Manager 11.6 F5 BIG-IP Global Traffic Manager 11.5.2 F5 BIG-IP Global Traffic Manager 11.5 F5 BIG-IP Application Security Manager 11.6 F5 Big-Ip Application Security Manager 11.5.2 F5 BIG-IP Application Security Manager 11.5.1 F5 BIG-IP Application Security Manager 11.5 F5 Big-IP Application Acceleration Manager 11.6 F5 Big-IP Application Acceleration Manager 11.5.2 F5 Big-IP Application Acceleration Manager 11.5.1 F5 Big-IP Application Acceleration Manager 11.5 F5 BIG-IP Analytics 11.5.2 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.5 F5 BIG-IP Analytics 11.6.0 F5 Big-Ip Advanced Firewall Manager 11.6 F5 Big-Ip Advanced Firewall Manager 11.5.2 F5 Big-IP Advanced Firewall Manager 11.5 F5 Big-IP Advanced Firewall Manager 11.5.1 F5 Big-Ip Access Policy Manager 11.5.2 F5 Big-Ip Access Policy Manager 11.5.1 F5 Big-Ip Access Policy Manager 11.5 F5 Big-Ip Access Policy Manager 11.6.0 |
| Not Vulnerable: | |
Discussion
Multiple F5 BIG-IP Products SSL Certificate Validation Multiple Security Bypass Vulnerabilities
Multiple F5 BIG-IP products are prone to multiple security-bypass vulnerabilities.
Attackers can exploit these issues through man-in-the-middle attacks and perform unauthorized actions, which may lead to further attacks.
Multiple F5 BIG-IP products are prone to multiple security-bypass vulnerabilities.
Attackers can exploit these issues through man-in-the-middle attacks and perform unauthorized actions, which may lead to further attacks.
Exploit / POC
Multiple F5 BIG-IP Products SSL Certificate Validation Multiple Security Bypass Vulnerabilities
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.