Forum Discussion
Jacky_Tseng_140
Nimbostratus
Dec 30, 2013F5 BIG-IP Cookie Information Disclosure Vulnerability
I ran into an issue, it says "F5 BIG-IP Cookie Information Disclosure Vulnerability".
I tried out both solutions as follows, the problem still didn't get resolved.
Did I do something wrong? Is there...
Kevin_Stewart
Employee
Dec 31, 2013The default cookie persistence profile inserts a cookie into the browser that starts with "BIGipServer". Do you have any VIPs that use the default cookie persistence profile? As for the encoding, that shouldn't need to change it as long as the cookie name is unrecognizable. I suppose it is possible the scanner is picking up on the format of the cookie value, but I'm betting it's the cookie name that's causing this.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
