Bug ID 1018877: Subsession variable values mixing between sessions

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,,

Fixed In:
17.0.0, 16.1.4, 15.1.9

Opened: May 17, 2021

Severity: 3-Major


Subsession variable lookup internally assumes that a complete session DB lookup name (Session ID + Subsession key) is used. However, when using the lookup table, only the subsession key is passed in.


A Per-Request Policy execution may get the value of the subsession variable from a different APM session.


Subsession variables are referenced in the Per-Request Policy outside of the Subsession without the Session ID.


Add the session ID to the reference to the subsession variables used in Per-Request Policies.

Fix Information

Fixed an issue with subsession variable lookup.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips