Bug ID 921181: Wrong error message upon bad credential stuffing configuration

Last Modified: Jan 20, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3

Fixed In:
15.1.2.1

Opened: Jun 25, 2020
Severity: 3-Major

Symptoms

When you try to configure credential stuffing and provide invalid parameters, you see a misleading error: HTML Tag-like Content in the Request URL/Body

Impact

A misleading error is displayed.

Conditions

Configuration of bad ApplicationID, Access Token or wrong service type, generates a validation error, but the error message is confusing.

Workaround

None.

Fix Information

Wrong error message upon bad credential stuffing configuration has been corrected.

Behavior Change