Workaround on Cisco ASA CVE 2023-20269 broken the Cisco "password-management" on AD user account password expired

Workaround on Cisco ASA CVE 2023-20269 broken the Cisco "password-management" on AD user account password expired.

The user no longer able to change password after they expired.

Solution:

Re-apply the Cisco password-management configuration will resume the function.

Reference:

https://community.cisco.com/t5/vpn/cve-id-2023-20269-to-mitigate-this-vulnerability/td-p/4924383

https://community.cisco.com/t5/vpn/cisco-anyconnect-vpn-active-directory-user-password-expiration/td-p/1908952

Workaround on Cisco ASA CVE 2023-20269 broken the Cisco "password-management" on AD user account password expired