CVE-2017-6142

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced Firewall Manager versions 11.6.0 through 11.6.2 F5 BIG-IP Advanced Firewall Manager versions 12.1.0 through 12.1.2 F5 BIG-IP Advanced Firewall Manager version 13.0.0

Description The issue concerns the incorrect implementation of X509 certificate verification in the "user id" feature of the F5 BIG-IP Advanced Firewall Manager. This results in the failure to properly validate the remote server's identity.

Recommendations For versions 11.6.0 through 11.6.2, update the certificate verification mechanism to properly validate the remote server's identity. For versions 12.1.0 through 12.1.2, update the certificate verification mechanism to properly validate the remote server's identity. For version 13.0.0, update the certificate verification mechanism to properly validate the remote server's identity.