Vulnerability Recommended Actions
You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the above tables. If theVersions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade candidate currently exists.
BIG-IP APM
To mitigate this vulnerability on BIG-IP APM system, you can configure the Kerberos SSO Send Authorization configuration option to use any value exceptAlways (default). For information about configuring this option, refer to the** Kerberos Single Sign-On Method**chapter of the BIG-IP Access Policy Manager Single Sign-On Configuration Guide.
Supplemental Information