Last Modified: Apr 17, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4
Opened: Sep 23, 2015 Severity: 4-Minor
Session logs out. No error messages or retry logon page. --------------------------------------------- Your session is finished. Logged out successfully. Thank you for using BIG-IP. To open a new session, please click here. ----------------------------------------------
Without providing proper username and password, user is shown the error "Logged out successfully.", which is improper.
Your environment has an access policy like the following Success Start -> Logon Page -> Radius Auth ----> Advanced resource assign (webtop) -> allow. | | failure -----------------------------------------------> Deny. If you connect to the virtual server with this access policy and provide an empty username and password, you are logged out of the session and asked to open a new session page.
No mitigation observed.
None