Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5, 15.1.10.6
Opened: Apr 06, 2022 Severity: 4-Minor
When using a single page application, even after entering the correct captcha, the client is asked to enter another captcha. This loop keeps happening until the brute force detection window expires.
Users cannot log in even after entering correct captcha
- Brute force mitigation is configured with mitigated action as captcha - Single page application is used - Certain backend conditions are met
None
None