Bug ID 864321: Default Apache testing page is reachable at <mgmt-ip>/noindex

Last Modified: May 26, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5

Opened: Dec 20, 2019
Severity: 3-Major

Symptoms

For BIG-IP v14.1.x and later, the default testing page of the Apache web-server is accessible at <mgmt-ip>/noindex.

Impact

Limited information about the Apache web server and its operating system is available to users with access to the mgmt port interface.

Conditions

This is encountered when navigating to the /noindex page from the web browser.

Workaround

None.

Fix Information

None

Behavior Change