5.8
CVSSv2

CVE-2017-6130

Published: 06/04/2017 Updated: 12/04/2017
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.4 | Impact Score: 4 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 ssl orchestrator 2.0

f5 ssl intercept iapp 1.5.0

f5 ssl intercept iapp 1.5.7