Bug ID 649369: DES, 3DES and HIGH cipher string includes/excludes wrong ciphers

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.0.0

Fixed In:
13.1.0, 13.0.0 HF1

Opened: Mar 07, 2017

Severity: 2-Critical

Symptoms

When cipher string contains "DES", 3DES ciphers are also included. The keyword "3DES" does not impact the included/excluded ciphers. HIGH no longer includes 3DES ciphers.

Impact

Additional ciphers being offered to the client or ciphers not being omitted.

Conditions

Cipher string contains DES, 3DES and/or HIGH.

Workaround

None

Fix Information

None

Behavior Change

3DES ciphers moved from "high" to "medium".

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips