Skip to content
OpenAdvisories
Unscored CVE-2017-6130 EUVD-2017-15195GHSA-xj4r-whfg-77cr

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed usi…

Published Apr 6, 2017 · Updated Aug 5, 2024 · Assigned by f5

Description

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.

Affected products

VendorProductAffectedFixed
F5 Networks SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 —

References