Last Modified: Oct 17, 2024
Affected Product(s):
BIG-IP ASM
Fixed In:
16.1.5
Opened: Jun 22, 2023 Severity: 3-Major
Set-Cookie header has no value (cookie-string) in server-side.
Cookie header without value (cookie-string) is sent to server-side
- asm.strip_asm_cookies is enabled. - Cookie header from client has TS cookie(s) that are the only cookie.
Use an iRule to delete Cookie header in the server-side.
None