Description
On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate:
* An OAuth Server that references an OAuth Provider
* An OAuth profile with the Authorization Endpoint set to '/'
* An access profile that references the above OAuth profile and is associated with an HTTPS virtual server
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| F5 | BIG-IP | 14.1.0 – < 14.1.5.3, 13.1.0 | 14.1.5.3 |
Advisories 1
- WID-SEC-2023-0265 F5 BIG-IP: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2023