Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-6130

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) featur

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 Networks SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0

  • SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0affected

References