Forum Discussion
Nav_126513
Nimbostratus
NimbostratusIs F5 SAML implementation in APM vulnerable to the recent authentication bypass attacks via incorrect XML canonicalization and DOM traversal?
Hi all,
Duo Security has published several vulnerabilities on SAML implmentations, which apparently is related to XML canonicalization and DOM traversal.
Does anyone know if F5 implementation is vulnerable or not?
Regards
Nav_126513
amayle_299737I would also like to find out if the APM is affected. We utilise OKTA via the APM and although OKTA isn't vulnerable, I am unable to find any info on whether the APM is affected.
- amayle_299737
Thanks Erik.
ErikHi, F5 have make a comment on this. See K54462059