CVE-2017-6147: F5 BIG-IP Access Policy Manager

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server.

Affected products

• F5 BIG-IP Access Policy Manager: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Advanced Firewall Manager: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Analytics: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Application Acceleration Manager: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Application Security Manager: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Domain Name System: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Link Controller: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Local Traffic Manager: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Policy Enforcement Manager: version 12.1.2 only; version 13.0.0 only
• F5 BIG-IP Websafe: version 12.1.2 only; version 13.0.0 only

Published 2017-09-18. Last modified 2026-06-17.