On BIG-IP ASM 11.6.1-11.6.5.1, under certain...
Moderate severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 29, 2023
Description
Published by the National Vulnerability Database
Apr 30, 2020
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 29, 2023
On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied.
References