Last Modified: Apr 09, 2026
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
15.1.10.8, 17.1.3.1, 17.5.1.4, 17.5.1.5, 21.0.0, 21.0.0.1
Opened: Mar 17, 2026 Severity: 4-Minor
Protocol profile GUI fields for a virtual server appear to be editable for a Guest, Operator, or Auditor role although they are actually not accessible for these roles
GUI fields appear to be editable as if the user had admin access. The save/update of any edits does not occur; the fields only appear to be editable in the GUI
1. A virtual server is present 2. This virtual server has selected at least one Client SSL Profile 3. On the virtual server's properties page, a guest/auditor/operator user clicks on the name of a profile in the Selected column of Client SSL Profile field
None
None