Skip to content
OpenAdvisories
Unscored CVE-2016-7467 EUVD-2016-8320GHSA-gxpj-cpjp-q8f2

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider …

Published Apr 11, 2017 · Updated Aug 6, 2024 · Assigned by f5

Vendor: F5 Product: F5 BIG-IP APM Category: Network devices

Description

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector.

Affected products

VendorProductAffectedFixed
F5 Networks F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2 —

References