For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ramann_75062's avatar
ramann_75062
Icon for Nimbostratus rankNimbostratus
Jul 13, 2009

Disable CC data for POST requests

Hi @all,     its me again :-)     Today, i am looking for a way to deactivate the CC check only for POST requests - is this possible?     My first idea was, to do this...
app sec
BIG-IP Access Policy Manager (APM)
security
ramann_75062's avatar
ramann_75062
Icon for Nimbostratus rankNimbostratus
Jul 15, 2009
The response:

 

 

Kreditkartentyp VISA

 

 

Kreditkarten-Nr. ************0004

 

 

Gültigkeit 02/2014

 

 

For me, it looks like that the WAF interpret the POST data as the "Information Leakage Detected" and not the response of this POST.

 

This does not make sense, the webserver need the complete data for the payment - no data, no selling :-)