Last Modified: May 23, 2025
Affected Product(s):
BIG-IP ASM
Fixed In:
17.5.0
Opened: Aug 31, 2023 Severity: 3-Major
-- Meaningful strings get decoded -- Strings with a length less than the Base64 minimum length are decoded
False positives can occur
Base64 Decoding set to 'enabled' on cookies and headers
None
Base64 auto detection for headers and cookies works as expected