For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Martin_Vlasko's avatar
Martin_Vlasko
Icon for Altocumulus rankAltocumulus
Aug 14, 2014

Portal Access Security Problem - Manipulation with HEX string in URL mangle allows access to any internal website!! How to restrict?

Hi, We are running simple Portal Access policy on our APM, which provides authenticated external users an access to our public web site located behind the APM, basically a simple reverse proxy with...
BIG-IP Access Policy Manager (APM)
deployment
portal access
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Aug 20, 2014

i would say report it as a security bug. then again i know they will say it is expected behaviour. but if enough people report this it might change their mind and at least give some more attention to it.