For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Antoine_80417's avatar
Antoine_80417
Icon for Nimbostratus rankNimbostratus
Feb 12, 2015

APM Session ID not displayed in error page

Hello folks,   I ran into an issue today that you may have already encountered : I am using APM to authenticate users on a web application, and an error page is returned to the user (whatever the r...
BIG-IP Access Policy Manager (APM)
design
security
Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Feb 12, 2015

To my knowledge, this would not be possible if you deem this information to be a security problem. What might work to mitigate the exposure is to create a surrogate key to this session id that is not a problem if it is stolen by a third party.