This advisory details an unauthenticated local file inclusion vulnerability in F5 FirePass SSL VPN <= 7.0.0 HF-70-6, allowing arbitrary file disclosure and potential code execution via directory traversal and NULL byte injection in the 'sessionId' parameter of CitrixAuth.php.