Bug ID 1052173

Bug ID 1052173: For wildcard SSRF hosts "Matched Disallowed Address" field is wrong in the SSRF violation.

Last Modified: Nov 14, 2022

Affected Product: See more info
BIG-IP ASM(all modules)

Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1

Fixed In:
17.0.0, 16.1.2.2

Opened: Oct 05, 2021
Severity: 3-Major

"Matched Disallowed Address" and "Actual Disallowed Address" both are shown as same "Actual Disallowed Address" only.

Misleading SSRF violation details

- configure wildcard SSRF host

None.

None