For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

boneyard_11131's avatar
boneyard_11131
Icon for Nimbostratus rankNimbostratus
Feb 20, 2015

relation between CVE numbers and F5 ASM attack signatures

I was wondering if there is a way to check if certain CVEs are covered by an ASM attack signature?   For example for shellshock when you click on the attack signature in the F5 ASM you can see the...
ASM Advanced WAF
attack signature
management
operations
security
manjunath_sing1's avatar
manjunath_sing1
Icon for Nimbostratus rankNimbostratus
Nov 27, 2016

I Agree with the point, i too was looking for the same function. It is very difficult to identify which signature to enable to mitigate specific vulnerability with CVE code. There is no way to conform if the CVE that we are trying to mitigate has a valid signature in ASM or not, and also if it has whether we have used it or not.

 

Relating between CVE and ASM signature is a very much required function and F5 should take the inactivate to involve this feature at the earliest.