K03442392: BIG-IP ASM and Advanced WAF vulnerability CVE-2022-26890

Security Advisory Description When ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Session Awareness, and the "Use APM Username and Session ID" option is enabled, undisclosed requests can cause the bd process to terminate. CVE-2022-26890...

CVE-2022-26890

The CVE-2022-26890 issue affects F5 BIG-IP ASM, Advanced WAF, and APM when the ASM policy uses Session Awareness and the Use APM Username and Session ID option is enabled on a virtual server. The bd process can terminate due to undisclosed requests, causing a DoS (traffic disruption as the bd pro...