Forum Discussion

Nimbostratus

Jun 06, 2024

SECADV045: PA HTTP Smuggling vulnerability

Can you confirm if the following product 'F5 Rules for AWS WAF' has been updated to provide protection against SECADV045: PA HTTP Smuggling vulnerability? Tag- F5 Rules for AWS WAF

F5 Rules for AWS WAF

zamroni777

Nacreous

Jul 03, 2024

as mentioned in below article, enable RFC compliance enforcement in vserver's http profile.
this feature should also work in ltm-only license.

HTTP Request Smuggling, what it is, how to find it and how to stop it

https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-management-profiles-reference/services-profiles.html#concept-1183

Recent Discussions

Under Attack? F5 Will Help You.
Contacting F5 Support?

DevCentral Quicklinks

* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

Discover DevCentral Connects

* Podcasts
* Social Channels
* Video Streaming

Forum Discussion

SECADV045: PA HTTP Smuggling vulnerability

Recent Discussions

APM with EntraID as idP / request signed

Should config via cli rather than gui?

Background Tasks

APM Modern Customization - modify Header in user-common.js and form in user-logon.js

Which process is consuming higher CPU

Related Content

HTTP Request Smuggling, what it is, how to find it and how to stop it

What is SMTP Smuggling and how can you deal with it?

Coordinated Vulnerability Disclosure: A Balanced Approach

Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter

Mitigating new HTTP Request Smuggling techniques with BIG-IP ASM

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS