Bug ID 1967589: Using tmsh to query iControl REST (tmsh list mgmt ...) commands consume an auth token and does not get removed immediately

Last Modified: Jun 19, 2025

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.1.2, 17.1.2.1, 17.1.2.2

Opened: Jun 13, 2025

Severity: 3-Major

Symptoms

Executing tmsh commands that interact with the REST configuration module (e.g. "tmsh list mgmt ...") consume a REST token. These tokens are not released automatically by tmsh once the command finishes executing.

Impact

Once the token limit is exhausted, they will only expire after 20 minutes. If a configured token limit is reached, no users can log in until those tokens expire.

Conditions

Execute command on terminal "tmsh list mgmt shared authz tokens"

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips