X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote servers identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_advanced_firewall_manager | F5 | 11.5.1 (including) | 11.5.5 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.1 (including) | 11.6.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.0 (including) | 12.1.2 (including) |