Last Modified: Oct 22, 2026
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
17.5.1.9, 17.5.1.10
Opened: Sep 28, 2026 Severity: 3-Major
When Application Security remote logging is configured, the X-Forwarded-For header value recorded for a request can be incorrect. After a request containing this header, a subsequent request without it may be logged with the earlier value instead of N/A
The recorded client address information is inaccurate, which can mislead log review and anything that depends on it
- An Application Security remote logging profile is in use - The logging format includes the X-Forwarded-For header value - Requests are being logged
None
None