Forum Discussion

boneyard_11131's avatar
boneyard_11131
Icon for Nimbostratus rankNimbostratus
Feb 20, 2015

relation between CVE numbers and F5 ASM attack signatures

I was wondering if there is a way to check if certain CVEs are covered by an ASM attack signature?   For example for shellshock when you click on the attack signature in the F5 ASM you can see the...
ASM Advanced WAF
attack signature
management
operations
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 20, 2015

there is rfe but it has not yet been implemented.

 

ID430144 - Attack signatures should be searchable by Reference (CVE)

 

  • Aaron_Booker's avatar
    Aaron_Booker
    Icon for Employee rankEmployee
    Jan 31, 2019

    As noted in comments below beginning in BIG-IP 13.1.0, you can filter the Attack Signature List in the Configuration utility by the CVE listed in the attack signature references. AskF5 has published a brief how-to:

     

    K45558510: Filtering the Attack Signature List by the referenced CVE

     

    You can leave feedback about the article on the article page itself.