CVE-2019-6687

published 2019-12-23

CVE-2019-6687: On versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in verification mechanism that fails to properly authenticate the…

high 7.4 CVSS 3.1

AV N AC H PR N UI N S U C H I H A N

On versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in verification mechanism that fails to properly authenticate the X.509 certificate of remote endpoints.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_application_security_manager	>= 15.0.0 < 15.1.0	15.1.0
f5	big-ip_asm	—	—
f5	big-ip_asm	—	—

CWE-295