Bug ID 1070073: ASM Signature Set accuracy filter is wrong on GUI.

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
15.1.5, 15.1.5.1, 15.1.6

Fixed In:
15.1.6.1, 14.1.5

Opened: Dec 23, 2021

Severity: 3-Major

Symptoms

For High/Medium Accuracy Signatures (These are Signatures Sets), The GUI shows signatures with an Accuracy Level that is different from the Signature Set.

Impact

Unintended Signatures could be included in the poliy.

Conditions

1. Go to Security ›› Options : Application Security : Attack Signatures : Attack Signature Sets. 2. Choose High Accuracy Signatures (a "built-in" signature set). 3. You will see Non-High accuracy signatures included in the set such as Zimbra Collaboration ProxyServlet SSRF.

Workaround

Create a custom filter-based Signature Set with setting their accuracy to High Accuracy signatures.

Fix Information

N/A

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips