OPERATIONAL DEFECT DATABASE
...
...
HTTP Strict-Transport-Security (HSTS) headers are missing for some APM-generated files.
Without these headers, the user agent (browser) may switch to non-secure communication.
This occurs when the following conditions are met: -- HTTP profile is configured with HSTS enabled. -- HTTP GET requests for APM renderer files, including CSS, JS, and image files from the webtop.
None.
When the HTTP profile is configured with HSTS enabled, all APM renderer files are now sent with HSTS headers.
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
