| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| big-ip access policy manager | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip advanced firewall manager | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip analytics | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip application security manager | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip domain name system | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip edge gateway | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip fraud protection service | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip global traffic manager | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip link controller | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip local traffic manager | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip policy enforcement manager | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 | |
| big-ip webaccelerator | = 11.6.1= 12.1.0≥ 11.5.1, ≤ 11.5.4 |
On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle (MITM) attack, despite the attacker not having gained access to the server's private key itself. (CVE-2019-6593 also known as Zombie POODLE and GOLDENDOODLE.)
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí