Unencrypted Data Plane Traffic Vulnerability on BIG-IP ASM 11.6.1-11.6.5.1

Unencrypted Data Plane Traffic Vulnerability on BIG-IP ASM 11.6.1-11.6.5.1

CVE-2020-5879 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied.

Learn more about our Cis Benchmark Audit For Server Software.