Last Modified: Sep 13, 2023
Known Affected Versions:
13.1.1, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 13.1.3, 184.108.40.206
15.1.0, 220.127.116.11, 18.104.22.168
Opened: May 13, 2019 Severity: 3-Major
The BIG-IP system does not preserve WebSocket frames. Frame headers and payload may be reordered such that a header for a second frame may be sent out in the middle of a first frame's payload. Frame boundaries get skewed and payload gets interpreted as headers.
WebSocket frames are not preserved such that traffic appears to be garbage. -- If request logging is enabled, client frames may not be preserved. -- If response logging is enabled, server frames may not be preserved.
A request logging profile is configured on a WebSocket virtual server.
Remove the request logging profile.