Last Modified: Dec 07, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
15.1.5, 15.1.5.1, 15.1.6
Fixed In:
15.1.6.1, 14.1.5
Opened: Dec 23, 2021 Severity: 3-Major
For High/Medium Accuracy Signatures (These are Signatures Sets), The GUI shows signatures with an Accuracy Level that is different from the Signature Set.
Unintended Signatures could be included in the poliy.
1. Go to Security ›› Options : Application Security : Attack Signatures : Attack Signature Sets. 2. Choose High Accuracy Signatures (a "built-in" signature set). 3. You will see Non-High accuracy signatures included in the set such as Zimbra Collaboration ProxyServlet SSRF.
Create a custom filter-based Signature Set with setting their accuracy to High Accuracy signatures.
N/A