K88162221 : The BIG-IP ASM system may not properly perform signature checks on cookies

Security Advisory Description

The BIG-IP ASM system may not properly perform signature checks on cookies.

This issue occurs when the following condition is met:

• You have a security policy enabled with cookie scope attack signatures.

Impact

Cookies containing malicious payload may pass through the system without logging a violation.

Symptoms

As a result of this issue, you may encounter the following symptom:

• Some attack signatures do not match a cookie with malicious content, and the system forwards the cookie to the backend hosts without logging a violation.