Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
11.1.0, 11.2.0, 11.3.0, 11.4.0, 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
13.0.0
Opened: Nov 04, 2015 Severity: 3-Major
Copying password using "mcget -secure" command in Variable Assignment agent will fail if user decides not to change password when prompted.
New session variable will not be created by the Variable Assign Agent.
The problem happens with these three conditions: 1. AD Query Agent is configured with "Prompt user to change password before expiration"; AND 2. User's password is about to expire and is prompted to change password by AD Query Agent; AND 3. User has chosen not to change password.
Moving the Variable Assign Agent before the AD Query Agent.
after fix, password is always stored as secure session variable session.logon.last.password in encrypted form.