Bug ID 756418: Live Update does not authenticate remote users

Last Modified: Jul 03, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5

Fixed In:
15.0.0, 14.1.0.6

Opened: Jan 24, 2019
Severity: 4-Minor

Symptoms

Remote users with Administrator or Application Security Administrator roles cannot run Live Update.

Impact

-- Remote users cannot manually check for updates. -- Remote users cannot manually upload new files. -- Remote users cannot install new update files.

Conditions

-- Remote user (LDAP/RADIUS). -- Remote user logged in. -- New installation is available.

Workaround

Log in with a local user like admin, application security editor, or application security administrator.

Fix Information

Authentication is directly done from MCP. Remote users are not treated like local users, so only the role of the user determines the ability to perform operations such as Live Update.

Behavior Change