Forum Discussion

MVP

Jun 04, 2022

iRule to mitigate CVE-2022-26134 (Confluence)

On June 2, 2022, Atlassian published a security advisory for CVE-2022-26134, a critical unauthenticated remote code execution vulnerability in Confluence. There is a patch available from Atlassian or...

application delivery

security

Daniel_Wolf

MVP

Jun 04, 2022

Seems meanwhile a knowledgebase article has been published.

K01204888: Mitigate the Atlassian Confluence vulnerability with the BIG-IP system

In case you have ASM or AWAF and you have enforced the signatures mentioned in K01204888, you are protected. In case you don't have ASM or AWAF my iRule might still help.

Forum Discussion

iRule to mitigate CVE-2022-26134 (Confluence)

Recent Discussions

How to lift the connection limit for a given IP address ？

SAML agent failed to process signed assertion error memory allocation

SMS Gateway and BIGip

Need help to understand the flow logic of the irule

Unable to create F5 in AWS via CFT - no internet access

Related Content

CitrixBleed Mitigation CVE-2023-4966

F5 Distributed Cloud L3-L7 DDoS Mitigation

JA4 Part 2: Detecting and Mitigating Based on Dynamic JA4 Reputation

Mitigating OWASP API Security risks using BIG-IP

Mitigating Application Threats with BIG-IP Next WAF