Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1
Fixed In:
14.1.0
Opened: May 01, 2018 Severity: 4-Minor
When a request is accepted from request log, several suggestions can be automatically accepted by the policy builder. These accepted suggestions are shown in audit log as accepted suggestions of the policy builder without disclosing the fact that the suggestions were accepted due to an accepted request.
Audit log can be misleading (e.g., if the policy builder is in manual mode, it is very unexpected to see automatic suggestions accepted).
Accepting request from request log.
None.
Audit log record of accepted suggestions originating in accepted request will change as follows: - Component stays 'Policy Builder'. - Description includes the following information: 'Operation originated in user-accepted request. Support ID: xxxxxxxxxxxxx'. - 'User' is the user that accepted the request.
