Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM, LTM
Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.6.2 HF1, 11.4.0, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
12.0.0, 11.6.0 HF4, 11.5.1 HF6, 11.4.1 HF6
Opened: Aug 05, 2014 Severity: 2-Critical Related Article:
K16357
The BIG-IP system expects to receive SLO responses on a particular URL: (.../post/slr). TMM may restart when SLO response is received on an SLO request URL (.../post/sls).
TMM reboots and is temporarily unavailable.
The BIG-IP system is configured as SAML SP or IdP. SLO response is received on SLO request URL.
There are two workarounds: 1. Reconfigure another SAML party to send SLO messages to a proper URL. 2. Disable SLO
Proper validation was added to check correct messages were received on proper URL. Logging was added for failing cases.