Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP ASM, AVR
Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4
Fixed In:
14.1.0, 14.0.0.5
Opened: Jul 05, 2018 Severity: 3-Major
When there is a request for page load time in the analytics profile, and changes to the configuration remove the analytics profile, AVR will continue to inject the Client Side Performance Monitoring (CSPM) cookie.
Page-load-time cookie is injected when it should not be.
-- Request for page-load-time statistic. -- The analytics profile has been removed from the virtual server.
Uncheck the page-load-time checkbox before removing the profile from the virtual server.
AVR now injects CSPM cookie only when it needed.
