Bug ID 426564: Bad parsing of multipart requests with nameless parameters

Last Modified: Nov 22, 2021

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
10.2.4, 11.2.1, 11.3.0, 11.4.0

Fixed In:
11.5.0

Opened: Jul 30, 2013

Severity: 3-Major

Related Article: K82434354

Symptoms

A multipart request that includes a nameless parameter with a null value does not trigger the enforced violation.

Impact

No enforcer occurs for "Null in multi-part parameter value" violation on nameless parameter.

Conditions

Send multipart request with nameless parameters

Workaround

This issue has no workaround at this time.

Fix Information

A multipart request that includes a nameless parameter with a null value now triggers the enforced violation.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips