Forum Discussion
SteveEason
Cirrus
May 01, 2020Cookie Encyrption Question - I'm confused
Recently we were notified by our Security team that the F5 cookies were not secure and needed to be adjusted. F5 BIG-IP Cookie Remote Information Disclosure (20089) (Tenable scan) I sta...
boneyard
MVP
May 03, 2020if you read the Tenable article:
https://www.tenable.com/plugins/nessus/20089
then it does seem to indicate this is about the persistence cookie, so it is weird you say persistence isn't used.
can the security team perhaps show some "proof" about which cookie and for which virtual server this is?
if it is about the F5 cookie, then you don't have to change anything on the http profile, as that is for the backend server cookies.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects