Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server's private key itself, aka a ROBOT attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
F5 BIG-IP virtual server 安全漏洞
Vulnerability Description
F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的多合一网络设备。virtual server是其中的一个虚拟服务器。 F5 BIG-IP 11.6.0-11.6.2版本、12.0.0版本至12.1.2 HF1版本和13.0.版本至13.0.0 HF2版本中的带有Client SSL配置文件的virtual server存在安全漏洞。攻击者可利用该漏洞获取明文形式的加密消息和/或实施中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A