Prevent Ticketbleed

    The proprietary F5 TLS stack is vulnerable to ticketbleed. It exposes 31 bytes per request to the attacker and will ultimately invalidate the encryption.

    Security Assessment

    Security_Assessment_PreventTicketbleed

    CVSS Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    Vulnerability Information

    The proprietary F5 TLS stack is vulnerable to ticketbleed. It exposes 31 bytes per request to the attacker and will ultimately invalidate the encryption.

    Guides

    Please refer to the website of the manufacturer for a guide to resolve the issue.

    For more information about Crashtest Security visit crashtest-security.com

    Crashtest Security GmbH Wiki