6
CVSSv2

CVE-2016-9256

Published: 09/05/2017 Updated: 16/05/2017
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Vulnerability Summary

In F5 BIG-IP 12.1.0 up to and including 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 big-ip local traffic manager 12.1.1

f5 big-ip local traffic manager 12.1.0

f5 big-ip local traffic manager 12.0.0

f5 big-ip local traffic manager 12.1.2

f5 big-ip application acceleration manager 12.1.1

f5 big-ip application acceleration manager 12.1.2

f5 big-ip application acceleration manager 12.1.0

f5 big-ip application acceleration manager 12.0.0

f5 big-ip advanced firewall manager 12.1.2

f5 big-ip advanced firewall manager 12.0.0

f5 big-ip advanced firewall manager 12.1.0

f5 big-ip advanced firewall manager 12.1.1

f5 big-ip analytics 12.1.1

f5 big-ip analytics 12.0.0

f5 big-ip analytics 12.1.2

f5 big-ip analytics 12.1.0

f5 big-ip access policy manager 12.1.1

f5 big-ip access policy manager 12.1.2

f5 big-ip access policy manager 12.1.0

f5 big-ip access policy manager 12.0.0

f5 big-ip application security manager 12.1.0

f5 big-ip application security manager 12.1.1

f5 big-ip application security manager 12.0.0

f5 big-ip application security manager 12.1.2

f5 big-ip domain name system 12.1.2

f5 big-ip domain name system 12.1.1

f5 big-ip domain name system 12.1.0

f5 big-ip domain name system 12.0.0

f5 big-ip link controller 12.1.2

f5 big-ip link controller 12.1.0

f5 big-ip link controller 12.0.0

f5 big-ip link controller 12.1.1

f5 big-ip policy enforcement manager 12.1.2

f5 big-ip policy enforcement manager 12.1.0

f5 big-ip policy enforcement manager 12.1.1

f5 big-ip policy enforcement manager 12.0.0

f5 big-ip websafe 12.1.0

f5 big-ip websafe 12.1.1

f5 big-ip websafe 12.1.2

f5 big-ip websafe 12.0.0