Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP APM
Fixed In:
16.0.0
Opened: Jan 30, 2020 Severity: 3-Major
The Chrome browser (i.e version 80 ) changes the way it treats the samesite cookie attribute to be complaint, according to https://tools.ietf.org/html/draft-west-cookie-incrementalism-00 In this case, if the server does not set the samesite cookie attribute, the browser will treat the cookie attribute as equivalent to "samesite=Lax", which changes the behavior of how the cookie is shared with the domain, which did not originally set the cookie.
The latest browser (eg : chrome80 ) will stop sending the APM cookie back to the different domain, if it does not find the samesite cookie attribute for APM cookies.
APM is configured.
Custom irule to add samesite cookie attribute to the APM cookies in HTTP_RESPONSE_RELEASE.
None