CVE-2017-6130 in SSL Intercept iApp

सारांश

द्वारा MITRE

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 21/02/2017
• प्रकटीकरण: 06/04/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-99341
• CPE: तैयार
• CWE: CWE-918 (पुष्टि की गई)
• CVSS: 7.4 (NVD)
• EPSS: 0.01147
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6130
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6130
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6130/