For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jksingh_44237's avatar
jksingh_44237
Icon for Nimbostratus rankNimbostratus
Jan 04, 2010

The remote load balancer suffers from an information disclosure vulnerability at port 80 and 443

I am looking a solution for this issue.....   I have BIGIP (BIG-IP 9.3.1 Build 37.1)     Port http (tcp/80)   Synopsis :   The remote load balancer suffers from an i...
dev
devops
iControl
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 22, 2012
Hi Chris,

 

 

The simple fix is to encrypt the persistence cookie:

 

 

sol7784: Overview of cookie encryption

 

https://support.f5.com/kb/en-us/solutions/public/7000/700/sol7784.html?sr=20249094

 

 

I'd encourage you to open a case with F5 Support and request a checkbox option on the cookie insert persistence profile to encrypt the persistence cookie.

 

 

Aaron