| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | ≥ 11.6.1, ≤ 11.6.3 |
On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free