Forum Discussion
GVR_Dinesh_1748
Nimbostratus
NimbostratusConfigure iRule for CWE ID 352 CWE name Cross-Site Request Forgery (CSRF) vulnerability
How to configure the irule to fix the vulnerability CWE ID 352 CWE name Cross-Site Request Forgery (CSRF) in F5.
FA_Session cookie is set by f5 load balancer to route request to same app servers...
Lee_Sutcliffe
Nacreous
NacreousThere a very good article that explains this problem and provides an iRule and a traffic policy example on how to mitigate this CVE
https://devcentral.f5.com/articles/increased-security-with-first-party-cookies-30715
