F5 FirePass SQL Injection and Redirection Vulnerabilities

Multiple vulnerabilities have been identified in F5 FirePass, which can be exploited by malicious people to conduct spoofing and SQL injection attacks.

1. Input passed via the "refreshURL" parameter to my.activation.cns.php3 is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link.
2. Certain unspecified input passed to the FirePass controller is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.