| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip advanced firewall manager | ≥ 11.5.1, ≤ 11.5.5≥ 11.6.1, ≤ 11.6.2≥ 12.1.0, ≤ 12.1.2 | |
| big-ip application security manager | ≥ 11.5.1, ≤ 11.5.5≥ 11.6.1, ≤ 11.6.2> 12.1.0, ≤ 12.1.2 |
X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free