Bug ID 864321: Default Apache testing page is reachable at <mgmt-ip>/noindex

Last Modified: Apr 17, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,,, 15.1.9,, 15.1.10,,,

Fixed In:

Opened: Dec 20, 2019

Severity: 3-Major


For BIG-IP v14.1.x and later, the default testing page of the Apache web-server is accessible at <mgmt-ip>/noindex.


Limited information about the Apache web server and its operating system is available to users with access to the mgmt port interface.


This is encountered when navigating to the /noindex page from the web browser.



Fix Information

/noindex now returns a 403 Forbidden Error Response.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips