Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5
Fixed In:
15.0.0, 14.1.0.6
Opened: Jan 24, 2019 Severity: 4-Minor
Remote users with Administrator or Application Security Administrator roles cannot run Live Update.
-- Remote users cannot manually check for updates. -- Remote users cannot manually upload new files. -- Remote users cannot install new update files.
-- Remote user (LDAP/RADIUS). -- Remote user logged in. -- New installation is available.
Log in with a local user like admin, application security editor, or application security administrator.
Authentication is directly done from MCP. Remote users are not treated like local users, so only the role of the user determines the ability to perform operations such as Live Update.