Forum Discussion

GauravL's avatar
GauravL
Icon for Nimbostratus rankNimbostratus
Jun 06, 2024

SECADV045: PA HTTP Smuggling vulnerability

Can you confirm if the following product 'F5 Rules for AWS WAF' has been updated to provide protection against SECADV045: PA HTTP Smuggling vulnerability?  Tag- F5 Rules for AWS WAF
F5 Rules for AWS WAF
Pradeep_Kandi's avatar
Pradeep_Kandi
Icon for Employee rankEmployee
Jul 03, 2024

Hi GauravL 

AWS WAF Rules doesn't provide protection against CVE-2024-23316. Since it's an HTTP Request Smuggling vulnerability, AWS Load Balancer needs to be set up to guard against it. I hope this link will be useful https://kloudle.com/academy/configuring-aws-load-balancers-to-protect-against-http-desync-attacks/