Bug ID 428933: Wrong processing of "expires" field in cookie forced the BIG-IP to lose cookie value

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.0.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.5.1 HF1, 11.6.1 HF1, 11.5.1 HF2, 11.6.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.6.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0

Opened: Aug 27, 2013

Severity: 3-Major

Related Article: K14983

Symptoms

The cookie set on client side using document.cookie property will be ignored if date format in 'expires' field is not recognized in our rewriting code. Additionally this will trigger 'connection reset' response for our internal request to /private/fm/volatile.html?F5CH=<some hex data>

Impact

Some sites may work incorrectly when setting cookies from javascript code.

Conditions

Cookies created from javascript code with incorrect date format in 'expires' field.

Workaround

None

Fix Information

Cookies created from JavaScript with the wrong date format in the expires field are processed correctly.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips