Operational Defect Database

BugZero found this defect 1175 days ago.

F5 | 989529

AFM IPS engine takes action on unspecified services

Last update date:

4/30/2024

Affected products:

BIG-IP

BIG-IP TMOS

Affected releases:

15.1.0

15.1.0.1

15.1.0.2

15.1.0.3

15.1.0.4

15.1.0.5

15.1.1

15.1.2

15.1.2.1

15.1.3

15.1.3.1

15.1.4

Fixed releases:

No fixed releases provided.

Description:

Severity: 3-Major ... Symptoms ... Specific ports configured in the IPS profile are not taken into account during the matching action exercised by the IPS subsystem. ... As a result, all ports are matched. ... Impact ... Increased resource usage and excessive logging. ... Conditions ... Service ports specified under Security :: Protocol Security : Inspection Profiles :: service type (e.g., HTTP).

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Verified

Learn More

Search:

...