A new policy (baseline version 201709220727) for the Virtual Web Application Firewall is now available.
Change log:
- Added: Remote command execution via java.lang.ProcessBuilder
There is a zip archive attached to this message which contains this policy. The archive needs to be extracted before it can be uploaded to the WAF (either via web UI or REST API).
The download in the product is available with a short delay.