Bug ID 1346545: Base64 auto detection does not work as expected for cookies and headers

Last Modified: May 23, 2025

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
17.5.0

Opened: Aug 31, 2023

Severity: 3-Major

Symptoms

-- Meaningful strings get decoded -- Strings with a length less than the Base64 minimum length are decoded

Impact

False positives can occur

Conditions

Base64 Decoding set to 'enabled' on cookies and headers

Workaround

None

Fix Information

Base64 auto detection for headers and cookies works as expected

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips