For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Asim_Afzal_1147's avatar
Asim_Afzal_1147
Icon for Nimbostratus rankNimbostratus
Sep 02, 2015

SSL Certificate - Signature Verification Failed Vulnerability

Hi,   i have following vulnerability on the scan.Can some body know how to fix this   F5 ASM version 11.4   SSL Certificate - Signature Verification Failed Vulnerability   CVSS Temporal...
ASM Advanced WAF
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Sep 07, 2015

not that much information (sure a whole lot of text on the issue, but that is just copy pasting).

 

i assume a basic vulnerability scan (probably with Qualys) was performed against the management interface of your BIG-IP?

 

in that case it probably doesn't like that you are using the the self signed BIG-IP server certificate which isn't signed by a CA the scanning tool knows. so to resolve this you have to put a certificate signed by a known CA on the BIG-IP: http://support.f5.com/kb/en-us/solutions/public/14000/600/sol14620.html