Last Modified: Dec 05, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4
Fixed In:
17.1.2
Opened: Oct 19, 2023 Severity: 2-Critical
The SAML Auth Request signature is invalid.
SAML Auth req not signed properly which breaks the saml flow and impacts accessing the resources
-- SAML sp configured with signed authn request -- SSO binding is set to http-redirect -- want-detached-signature is set to true
None
Properly fetching the compressed Authn Req along with signature from tmm and sending to apmd and storing in respective session vairiables;