Forum Discussion

squip_86995's avatar
squip_86995
Icon for Nimbostratus rankNimbostratus
Apr 07, 2014

OpenSSL and Heart Bleed Vuln

Get the latest updates on how F5 mitigates Heartbleed     Hi Team,   I know this question is eventually going to be asked - I may as well do it.   With the news today about the Heartblee...
https
management
security
ssl
tls
TMOS
HR_38560's avatar
HR_38560
Icon for Nimbostratus rankNimbostratus

so is 11.5.0 safe or do we need to update?

 

What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Apr 08, 2014
There is no update. v11.5 is vulnerable to this issue in two respects: 1) Where the Management Web GUI is concerned and 2) If any of your SSL Profiles contain cipher strings which contain compat ciphers but only if the client negotiates a compat cipher (which a hacker clearly would ensure happens).