Forum Discussion
boneyard_11131
Nimbostratus
Nimbostratusrelation between CVE numbers and F5 ASM attack signatures
I was wondering if there is a way to check if certain CVEs are covered by an ASM attack signature?
For example for shellshock when you click on the attack signature in the F5 ASM you can see the...
manjunath_sing1Nimbostratus
NimbostratusI Agree with the point, i too was looking for the same function. It is very difficult to identify which signature to enable to mitigate specific vulnerability with CVE code. There is no way to conform if the CVE that we are trying to mitigate has a valid signature in ASM or not, and also if it has whether we have used it or not.
Relating between CVE and ASM signature is a very much required function and F5 should take the inactivate to involve this feature at the earliest.