For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

foremans_135136's avatar
foremans_135136
Icon for Nimbostratus rankNimbostratus
Oct 08, 2013

HTTP Set-Cookie broken due to multiple "; Secure" inserted

Greeting! I'm from SAP and currently we are using F5 loadbalancing, and use iRule to add secure for all the cookiee send back to browser, sorry I'm not from OPS team and not familiar with F5 product...
application delivery
devops
iRules
sap
security
JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Oct 08, 2013

It looks like there is some process that inserts "; Secure" in the wrong place; it could be an existing incorrectly coded irule that does this on the F5, or it's your backend app that does it.