Last Modified: Jul 28, 2026
Affected Product(s):
BIG-IP ASM
Fixed In:
21.1.0.1, 21.0.0.3, 17.5.1.8, 17.1.3.4
Opened: May 20, 2026 Severity: 3-Major
When creating a policy from an OpenAPI file containing a parameter defined with type: string and format: binary, the resulting parameter is configured with "Base64 Decoding" enabled
Base64 Decoding enabled in GUI
An OpenAPI file is imported to create an ASM policy, and the file contains a parameter defined with type: string and format: binary
Base64 Decoding disabled in GUI
Changed flg_detect_base64 to 0 to be disabled