Last Modified: Aug 01, 2025
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
17.1.2, 17.1.2.1, 17.1.2.2, 17.5.0, 17.5.1
Opened: Jun 13, 2025 Severity: 3-Major
Executing tmsh commands that interact with the REST configuration module (e.g. "tmsh list mgmt ...") consume a REST token. These tokens are not released automatically by tmsh once the command finishes executing. Running commands like "tmsh list mgmt shared authz tokens" repeatedly can cause all 100 tokens to be consumed.
Once the token limit is exhausted, they will only expire after 20 minutes. If a configured token limit is reached, no users can log in until those tokens expire.
Execute command on terminal "tmsh list mgmt shared authz tokens"
Workaround #1: use the REST API. curl -sku user:password -X GET https://aa.bb.cc.dd/mgmt/shared/authz/tokens | jq . Workaround #2: Run the commands in an interactive tmsh session.
None