Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
11.4.1, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
12.0.0
Opened: May 12, 2015 Severity: 3-Major
Custom applications that create their own HTTP authentication requests that use LF alone for line endings will fail to authenticate.
Custom authentication tools may not authenticate against APM.
Authentication must come from a custom application. Browsers and other applications that follow the HTTP specification are not affected.
An iRule can process the incoming authentication requests and adjust the line endings.
The APM HTTP parser accepts either LF or CR LF for line termination.