For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Abi80_167352's avatar
Abi80_167352
Icon for Nimbostratus rankNimbostratus
Sep 11, 2014

vulnerability

Can anyone suggest me a hotfix or aworkaround to get rid of this vulnerability http://www.tenable.com/plugins/index.php?view=single&id=20089;%20Support%20information:%20http://support.f5.com/kb/en-u...
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Sep 11, 2014

Hello,

 

You can encrypt your persistence cookie via irule or on http profile

 

  • You can set the name of the cookie in "Cookie encrypt" option of your http profile

     

  • You can check cookie encryption from your cookie persistence profile (may be not available if you run an old bigip version)

     

  • or you can encrypt the cookie using irules : https://devcentral.f5.com/wiki/irules.EncryptingCookies.ashx