Loading...
Loading...
SSL server does not check and validate Change Cipher Spec payload.
There is no impact to this issue.
This issue occurs when a clientssl profile is used.
This issue has no workaround.
clientssl profile (SSL server) now checks the Change Cipher Spec payload received from the SSL client, and ensures that the Change Cipher Spec payload is a single byte of value '1'.
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.