Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4
Opened: Jun 30, 2017 Severity: 3-Major
When the META-INF/INDEX.LIST file is present in one of application jar files, additional jars could be requested with unmangled URL. APM will block these requests and Java application will fail to start.
Oracle webforms failed to load
[Java Patcher] Absolute paths in JAR Index are not patched
The only workaround is to make all paths in META-INF/INDEX.LIST file of application jar file relative to the codebase and resign it.
None