CVE-2018-5524

Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1, virtual servers configured with Client SSL or Server SSL profiles which make use of network hardware security module (HSM) functionality are exposed and impacted by this issue.

Score

CVSS 3.0 5.3 Medium

Status

Modified - f5sirt@f5.com

Published

2018-06-01

Last modified

2024-09-17

Affected products

• Big-ip Access Policy Manager (F5)
• Big-ip Advanced Firewall Manager (F5)
• Big-ip Analytics (F5)
• Big-ip Application Acceleration Manager (F5)
• Big-ip Application Security Manager (F5)
• Big-ip Edge Gateway (F5)
• Big-ip Fraud Protection Service (F5)
• Big-ip Link Controller (F5)
• Big-ip Local Traffic Manager (F5)
• Big-ip Policy Enforcement Manager (F5)
• Big-ip Webaccelerator (F5)
• Aam (F5 Networks Inc.)
• Afm (F5 Networks Inc.)
• Analytics (F5 Networks Inc.)
• Apm (F5 Networks Inc.)
• Asm (F5 Networks Inc.)
• Big-ip Ltm (F5 Networks Inc.)
• Edge Gateway (F5 Networks Inc.)
• Fps (F5 Networks Inc.)
• Link Controller (F5 Networks Inc.)
• Pem (F5 Networks Inc.)
• Webaccelerator (F5 Networks Inc.)

References

• http://www.securitytracker.com/id/1041020
• https://support.f5.com/csp/article/K53931245