For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F5_LB_Eng's avatar
F5_LB_Eng
Icon for Cirrostratus rankCirrostratus
Dec 12, 2022

K35253541 doubts

K35253541 - java vulnerability come under tmm affected or mgmt- interface affected     
application delivery
mihaic's avatar
mihaic
Icon for MVP rankMVP
Dec 12, 2022

Right now there is no fix. No version to upgrade to.

The vulnerabilities are usually for the device itself.

So management interface is affected. 

But you can use self-ip also to manage the device. And that go through tmm.

look at the self-ip port-lockdown option. if is set to default it means it allows a bunch of ports, including https.

https://support.f5.com/csp/article/K17333

you might want to choose none and use only management interface for administrative stuff.