CVE-2017-6130

Published: Apr 6, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.

Vendor	Product	Versions
F5 Networks	SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0	affected `SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0`

References

https://support.f5.com/csp/article/K23001529

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-6130

Description

Affected Products

References