Bug ID 940249: Sensitive data is not masked after "Maximum Array/Object Elements" is reached

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
16.1.0, 16.0.1.1, 15.1.2, 14.1.3.1, 13.1.3.6, 12.1.6, 11.6.5.3

Opened: Aug 26, 2020

Severity: 2-Critical

Symptoms

If "Maximum Array/Object Elements" is reached and "JSON data does not comply with format settings" is detected, then all sensitive data after last allowed element is not masked.

Impact

Data after last allowed element is not masked.

Conditions

Define JSON profile, set "JSON data does not comply with format settings" to blocking and set "Maximum Array/Object Elements" to desired value.

Workaround

None

Fix Information

Now the values are masked.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips