K95444512 : TMM SSO plugin vulnerability CVE-2016-7467

Security Advisory Description

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector. (CVE-2016-7467)

This vulnerability affects BIG-IP APM systems that have the following configuration:

• The BIG-IP APM system is configured as a Security Assertion Markup Language (SAML) Identity Provider (IdP) with a Service Provider (SP) connector.
• The BIG-IP APM system is configured to require a signed authentication request as a SAML IdP.
• The attached SP connector has a signing certificate configured.

Impact

When the system is exploited, traffic is temporarily disrupted while services restart.