Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
12.1.0, 12.1.1
Fixed In:
13.0.0, 12.1.2
Opened: Jun 28, 2016 Severity: 3-Major
When selenium server package is running on an end point and a traffic being sent from there, proactive bot defense mechanism doesn't see selenium server opened ports.
Low impact as the selenium detection by ports scan has a low score and doesn't mitigate a client, unless it has another suspicious client properties (for example tor browser)
This occurs when ASM is provisioned with proactive bot defense enabled.
N/A
Ports scanning has fixed - wider range of ports are scanned.