For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

krisnaseechurn's avatar
krisnaseechurn
Icon for Altostratus rankAltostratus
Sep 14, 2022

parent{] (Parameter) blocking api calls with email address

i have an issue where this attack signature is blocking logins to my application with any emai address starting with parent.xxxxx@gmail.com or any other domain. I have tried the below suggestion to d...
application delivery
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Oct 08, 2022

Hello,

 

Have you generated ASM/Advanced WAF report to see that the signature is detected under the explicit parameter you created? It could be a bug or the signature being detected under the URL so maybe you will need to whitelist it there.

You can check the link below:

https://community.f5.com/t5/technical-forum/knowledge-sharing-f5-asm-advanced-waf-options-for-granual/td-p/207968

 

Also maybe search for bugs in ihealth or bug tracker with words like "signature parameter":

 

https://support.f5.com/csp/bug-tracker