All mgmt users, even lobbyadmin and read only, login as admin

[bulletsandspikes]

I have a 4402 and last night there was a power issue and I believe the controller rebooted. Now if we login using the lobbyadmin account, which is set as a lobbyadmin, it logs in as an admin. I have removed that account and readded it. I also added a test account as readonly and it also logged in as admin. Any help would be appreciated. Thanks.

[Rob Huffman]

Hi Jeremiah,

This sounds like a bug. Can you please tell us what WLC version you are running.

Thanks,

Rob

[bulletsandspikes]

Sorry. The version is: 4.2.173.0

Thanks,

Jeremiah

[Rob Huffman]

Hi Jeremiah,

No worries my friend! I spent some time looking but I cannot find the bug (if it is) related to this. Here was the closest, but it should be fixed in your version;

CSCsj21554 Bug Details

WLC: Information leak via lobby admin accounts: read access to config

Symptom:

Lobby account users, after login in controller, can see WLC configuration by using each section URL, instead of following the restricted web interface.

Conditions:

Wireless LAN Controller with user accounts in the LobbyAdministrator group.

Workaround:

Users of an affected system can workaround this bug by removing LobbyAdministrator accounts.

Status

Fixed

Severity

2 - severe

Last Modified

In Last Year

Product

Cisco 4400 Series Wireless LAN Controllers

Technology

1st Found-In

4.1(176.6)

Fixed-In

4.1(176.34)

4.1(177.0)

4.1(181.0)

4.2(46.0)

5.0(68.0)

4.2(61.0)

5.0(148.0)

Sorry man, I would go ahead and open a TAC Case,

Rob

[bulletsandspikes]

Thanks for your help Rob. I opened a TAC case and they told me to upgrade to 4.2.176. Again, thank you.

[Rob Huffman]

Hi Jeremiah,

You are most welcome my friend! Good work on the TAC Case.

Cheers!

Rob