For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Posting well formed JSON document incorrectly triggering ASM SQL-INJ violation

Hi,   we've an SQL-INJ violation - 200002149 - being raised on ASM that I don't see a way to suppress nicely. The thing is the parameter name is being taken to be the first 50 characters or so of ...
ASM Advanced WAF
security
Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Well this is all just test data in a dev environment. I expect that when it hits production we;ll have all sorts of extra fun :/

 

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Jun 03, 2014
    No doubt you will. False positives are inevitable.