Last Modified: Jan 17, 2025
Affected Product(s):
BIG-IP APM
Known Affected Versions:
17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1
Opened: Sep 26, 2024 Severity: 3-Major
BIG-IP supports import of external SAML SP metadata to create SP-Connector objects. When such metadata file contains two certificates (one with 'signing' and one with 'encryption use) then BIG-IP will import certificate that is positioned 'second' in metadata twice.
Only the second certificate is imported.
Imported metadata contains two certificates with different use types: 'signing' and 'encryption'
Import certificates manually
None