Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP APM
Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1
Fixed In:
13.1.0
Opened: Mar 20, 2017 Severity: 3-Major
The Portal Access module transforms intranet web application code to make it accessible via an APM virtual server. One of these transformations might incorrectly rewrite certain JavaScript constructor calls, though you might not see any immediate visible effect.
When Portal Access accesses the intranet application containing such code, 'obj.property' might be called instead of being constructed. As a result, the application might fail with a very obscure and difficult to diagnose errors.
The issue affects execution of expressions similar to 'new obj[property]' with certain property names in the web-application JavaScript code.
Use an iRule for each specific case. There is no global workaround.
Now Portal Access rewrite has improved rewriting of certain JavaScript expressions.
