certfr_avis - certfr-2014-avi-533

CERTFR-2014-AVI-533

Vulnerability from certfr_avis

Une vulnérabilité a été corrigée dans les produits F5. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
F5	BIG-IP	F5 BIG-IP APM versions 11.5.1 et antérieures
F5	BIG-IQ	F5 BIG-IQ Device versions 4.4.0 et antérieures
F5	BIG-IQ	F5 BIG-IQ Security versions 4.4.0 et antérieures
F5	BIG-IP	F5 BIG-IP ASM versions 11.5.1 et antérieures
F5	BIG-IP	F5 BIG-IP WOM versions 11.3.0 et antérieures
F5	BIG-IP	F5 BIG-IP WebAccelerator versions 11.3.0 et antérieures
F5	BIG-IQ	F5 BIG-IQ Cloud versions 4.4.0 et antérieures
F5	BIG-IP	F5 BIG-IP AAM versions 11.5.1 et antérieures
F5	BIG-IP	F5 BIG-IP LTM versions 11.5.1 et antérieures
F5	BIG-IP	F5 BIG-IP PEM versions 11.6.0 et antérieures
F5	BIG-IP	F5 BIG-IP AFM versions 11.5.1 et antérieures
F5	BIG-IP	F5 BIG-IP Analytics versions 11.5.1 et antérieures
F5	BIG-IP	F5 BIG-IP Edge Gateway versions 11.3.0 et antérieures
F5	BIG-IP	F5 BIG-IP PSM versions 11.4.1 et antérieures

References

Title

Publication Time

Tags

Bulletin de sécurité F5 sol15882 du 12 décembre 2014

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "F5 BIG-IP APM versions 11.5.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IQ Device versions 4.4.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IQ",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IQ Security versions 4.4.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IQ",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP ASM versions 11.5.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP WOM versions 11.3.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP WebAccelerator versions 11.3.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IQ Cloud versions 4.4.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IQ",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP AAM versions 11.5.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP LTM versions 11.5.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP PEM versions 11.6.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP AFM versions 11.5.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP Analytics versions 11.5.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP Edge Gateway versions 11.3.0 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    },
    {
      "description": "F5 BIG-IP PSM versions 11.4.1 et ant\u00e9rieures",
      "product": {
        "name": "BIG-IP",
        "vendor": {
          "name": "F5",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-8730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8730"
    }
  ],
  "initial_release_date": "2014-12-18T00:00:00",
  "last_revision_date": "2014-12-18T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-533",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-12-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans les produits \u003cspan\nclass=\"textit\"\u003eF5\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits F5",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 F5 sol15882 du 12 d\u00e9cembre 2014",
      "url": "https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html"
    }
  ]
}

CVE-2014-8730 (GCVE-0-2014-8730)

Vulnerability from cvelistv5

Published

2014-12-10 00:00

Modified

2024-08-06 13:26

Severity ?

CWE

Summary

The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself.

References

URL

Tags

	http://secunia.com/advisories/62167	third-party-advisory, x_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2014/12/09/27	mailing-list, x_refsource_MLIST
	http://marc.info/?l=bugtraq&m=144372772101168&w=2	vendor-advisory, x_refsource_HP
	http://www-01.ibm.com/support/docview.wss?uid=swg21693495	x_refsource_CONFIRM
	https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151	x_refsource_CONFIRM
	http://secunia.com/advisories/62224	third-party-advisory, x_refsource_SECUNIA
	https://support.lenovo.com/us/en/product_security/poodle	x_refsource_CONFIRM
	https://www.imperialviolet.org/2014/12/08/poodleagain.html	x_refsource_MISC
	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=swg21693271	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=swg21693337	x_refsource_CONFIRM
	http://secunia.com/advisories/62388	third-party-advisory, x_refsource_SECUNIA
	https://support.lenovo.com/product_security/poodle	x_refsource_CONFIRM
	https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:26:02.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "62167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62167"
          },
          {
            "name": "[oss-security] 20141209 Re: CVE question: Return of POODLE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/12/09/27"
          },
          {
            "name": "HPSBPV03516",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=144372772101168\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693495"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151"
          },
          {
            "name": "62224",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62224"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/poodle"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.imperialviolet.org/2014/12/08/poodleagain.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693271"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693337"
          },
          {
            "name": "62388",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62388"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/product_security/poodle"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).  NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "62167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62167"
        },
        {
          "name": "[oss-security] 20141209 Re: CVE question: Return of POODLE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/12/09/27"
        },
        {
          "name": "HPSBPV03516",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=144372772101168\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693495"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151"
        },
        {
          "name": "62224",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62224"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/poodle"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.imperialviolet.org/2014/12/08/poodleagain.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693271"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693337"
        },
        {
          "name": "62388",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62388"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/product_security/poodle"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-8730",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).  NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "62167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62167"
            },
            {
              "name": "[oss-security] 20141209 Re: CVE question: Return of POODLE",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2014/12/09/27"
            },
            {
              "name": "HPSBPV03516",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=144372772101168\u0026w=2"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21693495",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693495"
            },
            {
              "name": "https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151",
              "refsource": "CONFIRM",
              "url": "https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151"
            },
            {
              "name": "62224",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62224"
            },
            {
              "name": "https://support.lenovo.com/us/en/product_security/poodle",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/product_security/poodle"
            },
            {
              "name": "https://www.imperialviolet.org/2014/12/08/poodleagain.html",
              "refsource": "MISC",
              "url": "https://www.imperialviolet.org/2014/12/08/poodleagain.html"
            },
            {
              "name": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635",
              "refsource": "CONFIRM",
              "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21693271",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693271"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21693337",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21693337"
            },
            {
              "name": "62388",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/62388"
            },
            {
              "name": "https://support.lenovo.com/product_security/poodle",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/product_security/poodle"
            },
            {
              "name": "https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-8730",
    "datePublished": "2014-12-10T00:00:00",
    "dateReserved": "2014-11-10T00:00:00",
    "dateUpdated": "2024-08-06T13:26:02.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2014-AVI-533

Vulnerability from certfr_avis

Solution

CVE-2014-8730 (GCVE-0-2014-8730)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature