For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

boneyard's avatar
boneyard
Icon for MVP rankMVP
Jun 07, 2012

ASM violation: Modified domain cookie(s)

im getting this violation, from the info provided by the ASM it seems to happen when the cookie is first set, am i correct on that? it feels like this is a quite common thing to happen, is it some you...
app sec
BIG-IP Access Policy Manager (APM)
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jun 29, 2012
i understand the risks of clients changing a cookie, but apparently it also is a regularly used way to achieve certain functionality right?

 

 

so is there some way for me to determine what is expected to be fine or not? or will this require having full understanding of what the cookie is used for?

 

 

and one final question, does this really only trigger when the cookie is changed by the client not when the cookie is first set by the server and then returned by the client?