Last Modified: Oct 19, 2025
Affected Product(s):
F5OS Velos
Known Affected Versions:
F5OS-A 1.5.0, F5OS-A 1.5.1, F5OS-A 1.5.2, F5OS-A 1.5.3, F5OS-A 1.5.4, F5OS-A 1.7.0, F5OS-A 1.8.0, F5OS-A 1.8.3, F5OS-C 1.5.0, F5OS-C 1.5.1, F5OS-C 1.6.0, F5OS-C 1.6.1, F5OS-C 1.6.2, F5OS-C 1.6.4, F5OS-C 1.8.0, F5OS-C 1.8.1, F5OS-C 1.8.2
Opened: Sep 27, 2023 Severity: 3-Major
Inconsistent logging of SSH authentication events being sent to different log files: -- Successful logins and logouts to ConfD CLI are logged to /var/F5/system/log/audit.log. -- Successful logins and logouts with user root gets logged to /var/log/secure. -- Failed login attempts are logged to /var/log/secure.
-- Compliance and regulatory challenges due to the need to aggregate logs from multiple files for remote logging. -- Reduced operational efficiency and increased risk of missing critical security events.
-- F5OS system -- Current logging setup differentiates between successful and failed SSH login events, logging them to separate files.
None.
None