Operational Defect Database
BugZero found this defect 19 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
F5 | 1552921
Password policy option reject-username set to false has no effect
Last update date:
4/30/2024
Affected products:
F5OS
F5OS F5OS-A
F5OS F5OS-C
Affected releases:
F5OS-A 1.7.0
Fixed releases:
No fixed releases provided.
Description:
Bug ID 1552921: Password policy option reject-username set to false has no effect ... Last Modified: Apr 30, 2024 ... Symptoms ... When the administrator configures 'system aaa password-policy config reject-username false', F5OS will still reject passwords that contain the username. ... Impact ... When a user tries to set or change a password containing their username in any part of the password, F5OS will reject that password. ... Conditions ... System aaa password-policy config reject-username is set to false ... Workaround ... Do not use passwords that contain the username. ... Fix Information
