For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Abi80_167352's avatar
Abi80_167352
Icon for Nimbostratus rankNimbostratus
Sep 11, 2014

vulnerability

Can anyone suggest me a hotfix or aworkaround to get rid of this vulnerability http://www.tenable.com/plugins/index.php?view=single&id=20089;%20Support%20information:%20http://support.f5.com/kb/en-u...
Arie's avatar
Arie
Icon for Altostratus rankAltostratus
Sep 12, 2014

There's another information disclosure issue when the BIG-IP directly responds to an HTTP-request. In that case it will insert the following header:

Server: BigIP

To suppress this header you can add "noserver" to HTTP::respond:

HTTP::respond 301 noserver Location "http://www.domain.com/"