Last Modified: May 29, 2024
Affected Product(s):
BIG-IP All
Known Affected Versions:
17.0.0, 17.0.0.1, 17.0.0.2
Fixed In:
17.1.0
Opened: Aug 11, 2022 Severity: 3-Major
For JS requests towards Distributed Cloud, the value of "sed-api-ip" is not being set according to the 'Source of Client IP address' configuration from the Bot Defense profile.
Incorrect 'sed-api-ip' is forwarded towards Distributed Cloud.
- Bot Defense profile is configured. - The 'Source of Client IP address' field is configured to any other value other than 'x-forwarded-for'.
None
For JS requests towards Distributed Cloud, the value of "sed-api-ip" is set according to 'Source of Client IP address' configuration from Bot Defense profile.