Forum Discussion
tiziano_rosato
Mar 03, 2020Cirrus
they are refering to the easily to decode cookie BIGipServersecuritycode_pool , once decode you'll see the pool member IP address.
Easy solution is to encrypt the cookie.
Have a look into this great github page:
https://github.com/dnkolegov/bigipsecurity#persistence-cookie-information-leakage