Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Nav_126513's avatar
Nav_126513
Icon for Nimbostratus rankNimbostratus
8 years ago

Is F5 SAML implementation in APM vulnerable to the recent authentication bypass attacks via incorrect XML canonicalization and DOM traversal?

Hi all,   Duo Security has published several vulnerabilities on SAML implmentations, which apparently is related to XML canonicalization and DOM traversal.   Does anyone know if F5 implementati...
BIG-IP Access Policy Manager (APM)
saml
security
amayle_299737's avatar
amayle_299737
Icon for Nimbostratus rankNimbostratus
8 years ago

I would also like to find out if the APM is affected. We utilise OKTA via the APM and although OKTA isn't vulnerable, I am unable to find any info on whether the APM is affected.

 

  • amayle_299737's avatar
    amayle_299737
    Icon for Nimbostratus rankNimbostratus
    8 years ago

    Thanks Erik.