For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

George_33482's avatar
George_33482
Icon for Nimbostratus rankNimbostratus
Jul 17, 2018

decoding parameter name in ASM

Hello,   i have the violation of illegal parameter in the event viewer where part of the POST URL contains the parameter "ctrlvcol%3DcaptureAmount%3Bctrl%3Dconstraints%3Brow%3DTTT%3Btype%3Dtxt" wh...
ASM Advanced WAF
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Jul 17, 2018

Check the character sets > parameter name. Check if the % is allowed.

 

I think ASM would then convert after %3 to = after.

 

Also, make sure the application language of the policy matches the server.