CVE-2017-6130 in SSL Intercept iApp

Tóm tắt

Bởi MITRE

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 21/02/2017
• Tiết lộ: 06/04/2017
• Kiểm duyệt: được chấp nhận
• mục: VDB-99341
• CPE: sẵn sàng
• CWE: CWE-918 (Đã xác nhận)
• CVSS: 7.4 (NVD)
• EPSS: 0.01147
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6130
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6130
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6130/