Last Modified: Nov 07, 2022
Affected Product:
See more info
BIG-IP APM
Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2
Fixed In:
16.0.0, 15.1.0.3
Opened: Mar 12, 2020
Severity: 2-Critical
You can change the password even if there are different values in the fields 'New Password' and 'Confirm Password' or if 'Confirm Password' is empty.
The system allows the password change, even though the 'New Password' and 'Confirm Password' do not match.
-- Access Policy with 'Modern' customization. -- Configure an access policy with 'Logon Page' and 'AD Auth' agents. -- When forced to change passwords, type different values in 'New Password' and 'Confirm Password', or leave 'Confirm Password' empty.
None.
None
