Last Modified: Mar 08, 2026
Affected Product(s):
F5OS F5OS-A, F5OS-C
Known Affected Versions:
F5OS-A 1.8.0, F5OS-A 1.8.1, F5OS-A 1.8.2, F5OS-A 1.8.3
Opened: Aug 13, 2024 Severity: 2-Critical
When the F5OS Token Lifetime is set to one minute, users may be logged out of the F5OS GUI prematurely. This setting is located: - GUI: AUTHENTICATION & ACCESS -> Authentication Settings. - CLI: system aaa restconf-token config lifetime.
If the Token Lifetime is set to one minute it may expire before it has a chance to renew, so the user is logged out.
The restconf token is set to less than one minute.
Use a restconf token time limit of greater than 1 minute.
None