Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1
Fixed In:
13.1.0, 12.1.3.6
Opened: May 06, 2017 Severity: 3-Major
After an upgrade, an overridden HTTP method on a particular URL is enforced incorrectly. Additionally, in a rare circumstance, requests using GET method are illegal after upgrade.
Requests are incorrectly blocked.
A HTTP method is overridden on a particular URL and the system is upgraded.
Make a spurious change to any policy and click 'Apply Policy'.
Overridden HTTP methods are enforced correctly after upgrade.