For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NetWork's avatar
NetWork
Icon for Nimbostratus rankNimbostratus
Dec 21, 2020

F5 Cookies - Vulnerabilities

We have a VIP associated with default cookie persistence profile and below iRule configuration.   when HTTP_RESPONSE {   set myValues [HTTP::cookie names]   foreach mycookies $myValues {    H...
application delivery
BIG-IP
LTM
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Dec 21, 2020

If you have F5 Advanced WAF/ASM you can create a login page which will clear cookies on logout and force the client to login again.