Last Modified: Apr 18, 2024
Affected Product(s):
BIG-IP ASM, Install/Upgrade
Known Affected Versions:
15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 16.0.0, 16.0.0.1, 16.0.1
Fixed In:
16.1.0, 16.0.1.1, 15.1.3
Opened: May 19, 2020 Severity: 3-Major
After upgrade, some requests can cause BD errors on response: BEM|ERR |May 19 17:49:55.800|0983|response_header_accumulator.c:0200|Error: CookieMgrBuildCookie failed. ans 1 job 2957561040 IO_PLUGIN|ERR |May 19 17:49:55.800|0983|io_plugin.c:3320|TMEVT_RESPONSE: Cannot build a ts cookie.
For some requests, the response can arrive truncated or not arrive at all.
-- Upgrading BIG-IP systems to v15.0.0 or later from versions earlier than v15.0.0. -- ASM policy is configured on a virtual server.
Add an iRule that deletes ASM cookies: when HTTP_REQUEST { set cookies [HTTP::cookie names] foreach aCookie $cookies { if {$aCookie matches_regex {^TS(?:[0-9a-fA-F]{6,8})(?:$|_[0-9]+$)}} { HTTP::cookie remove $aCookie } } } Note: Performing this workaround affects cookie-related violations (they may need to be disabled to use this workaround), session, and login protection.
None