X509 certificate verification was not correctly implemented in the early access user id feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote servers identity on certain versions of BIG-IP.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_advanced_firewall_manager | F5 | 11.6.0 (including) | 11.6.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.0 (including) | 12.1.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 13.0.0 (including) | 13.0.0 (including) |