Last Modified: Jun 05, 2024
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3
Opened: Jul 07, 2023 Severity: 3-Major
Misinterpreting Other parameter data types as URI type
The request is blocked along with other parameter data types
-- Configure a policy that contains a parameter with Parameter Value Type = Auto detect and disable the staging. -- Set Illegal parameter data type in Learning and Blocking Settings to block
Modify the DEFAULT_ecard_regexp_uri through asm internal variables /usr/share/ts/bin/add_del_internal, execute the following command perl add_del_internal update DEFAULT_ecard_regexp_uri "^\\w+:\\/\\/([^\\s@]+@)?([^\\s^\\/]+)(:\\d+)?(\\/[^\\s]*)?"
None