Bug ID 479451: Different Outlook users with same password and client IP are tied to a single APM session when using Basic auth

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3

Fixed In:
12.0.0, 11.6.0 HF4, 11.5.3 HF2, 11.4.1 HF10

Opened: Sep 15, 2014

Severity: 3-Major

Related Article: K16737

Symptoms

Different Outlook users are tied to a single APM session.

Impact

The impact of this issue is APM does not validate Outlook credentials.

Conditions

Users have identical passwords and come from the same client IP address.

Workaround

This issue has no workaround at this time.

Fix Information

APM correctly validates Outlook credentials and creates new APM session for users that come from the same IP and have identical passwords.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips