Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2
Fixed In:
16.0.0, 15.1.0.3
Opened: Mar 12, 2020 Severity: 2-Critical
You can change the password even if there are different values in the fields 'New Password' and 'Confirm Password' or if 'Confirm Password' is empty.
The system allows the password change, even though the 'New Password' and 'Confirm Password' do not match.
-- Access Policy with 'Modern' customization. -- Configure an access policy with 'Logon Page' and 'AD Auth' agents. -- When forced to change passwords, type different values in 'New Password' and 'Confirm Password', or leave 'Confirm Password' empty.
None.
None