Operational Defect Database
BugZero found this defect 1789 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
F5 | 793077
Failed SSH logins no longer log entries into the audit log file
Last update date:
4/26/2024
Affected products:
BIG-IP
BIG-IP TMOS
Affected releases:
12.1.3
12.1.3.1
12.1.3.2
12.1.3.3
12.1.3.4
12.1.3.5
12.1.3.6
12.1.3.7
12.1.4
12.1.4.1
12.1.5
12.1.5.1
Fixed releases:
No fixed releases provided.
Description:
Severity: 4-Minor ... Symptoms ... When using SSH to log into the BIG-IP systems, failed login attempts are no longer being logged in the /var/log/audit log file. ... Instead failed logins continue to be logged in /var/log/secure log file. ... Impact ... Log file /var/log/audit no longer shows failed SSH login attempts. ... Failed logins via GUI continue to be logged in /var/log/audit file. ... Conditions ... Workaround ... View /var/log/secure log file for failed SSH login attempts. ... Fix Information
