SOL6923 - LDAP and RADIUS authentication failures can reveal a valid FirePass username

F5 Product Development tracked this issue as CR66767 for FirePass 5.5.1 and CR68628 for FirePass 6.0.0, and it was fixed in FirePass 5.5.2 and 6.0.1. For information about upgrading, refer to the FirePass release notes. Additionally, a hotfix has been issued for FirePass 5.5.1. Customers affected...

SOL6592 - Cross-Site Scripting vulnerability in the logon page

A cross-site scripting XSS vulnerability exists in the FirePass logon page. The affected FirePass logout URL fails to fully sanitize URL input before the web page content is sent to the browser. It is possible for an attacker to create web pages or emails with URLs that include executable code or...