For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ragunath154's avatar
ragunath154
Icon for Cirrostratus rankCirrostratus
Oct 06, 2020

F5 Config utility-Host is Vulnerable to Extended Master Secret TLS Extension

Hi Qualys scan reports Host is Vulnerable to Extended Master Secret TLS Extension the scan is done for the BIGIP configuration utility ie management ip. NOT of any VIP.   i didnt find any work...
application delivery
BIG-IP
security
ragunath154's avatar
ragunath154
Icon for Cirrostratus rankCirrostratus
Oct 06, 2020

Hi Lidev

thanks for the link,

i think that workaround is for the client ssl profile which attached to any virtual server.

 

i my case the scanning is done on the bigip configuration utility with device certificate.