Bug ID 1552913: For advanced/premium deployment of BD profile, incomplete single js download may lead to blocking Protected URIs.

Last Modified: Dec 05, 2024

Affected Product(s):
BIG-IP ASM, TMOS(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2

Opened: Feb 28, 2024

Severity: 4-Minor

Symptoms

For Advanced/Premium deployment of a BD profile, if a request to protected URI occurs before the page is fully loaded, incomplete single js download may lead to blocking the Protected URIs.

Impact

BD may block legitimate requests towards protected URIs.

Conditions

1. Advanced/Premium deployment of BD profile 2. Protected URI is configured with block / redirect mitigation action. 3. The backend server sends a protected URI request through some script before the entry page is fully loaded.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips