Last Modified: Apr 11, 2024
Affected Product(s):
BIG-IP ASM
Fixed In:
17.1.0, 16.1.4, 15.1.9
Opened: Oct 06, 2022 Severity: 3-Major
When using bearer authorization header with JWT, valid requests are blocked due to false positive attack signature match.
False positive attack signature can be detected on signature part of JWT token since it is binary data.
Bearer authorization with JWT token is used.
Disable certain attack signatures which are being detected on requests.
Attack signature check will not be done on signature part of JWT token which has binary data.