BugZero found this defect 1461 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
5/17/2024
BIG-IP
BIG-IP ASM
BIG-IP Install/Upgrade
15.0.1
15.0.1.1
15.0.1.2
15.0.1.3
15.0.1.4
15.1.0
15.1.0.1
15.1.0.2
15.1.0.3
15.1.0.4
15.1.0.5
15.1.1
16.1.0
16.0.1.1
15.1.3
ans 1 job 2957561040 IO_PLUGIN|ERR |May 19 17:49:55.800|0983|io_plugin.c:3320|TMEVT_RESPONSE: Cannot build a ts cookie. ... Impact ... For some requests, the response can arrive truncated or not arrive at all. ... Conditions ... -- Upgrading BIG-IP systems to v15.0.0 or later from versions earlier than v15.0.0. -- ASM policy is configured on a virtual server. ... Workaround ... Add an iRule that deletes ASM cookies: when HTTP_REQUEST { set cookies [HTTP::cookie names] foreach aCookie $cookies { if {$aCookie matches_regex {^TS(?:[0-9a-fA-F]{6,8})(?:$|_[0-9]+$)}} { HTTP::cookie remove $aCookie } } } Note: Performing this workaround affects cookie-related violations (they may need to be disabled to use this workaround), session, and login protection.