SecuritySpace - CVE-2016-9256

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9256

Description: In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change.

Test IDs: 1.3.6.1.4.1.25623.1.0.140194 1.3.6.1.4.1.25623.1.0.107169

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9256
BugTraq ID: 96464
http://www.securityfocus.com/bid/96464

CVE ID:	CVE-2016-9256
Description:	In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change.
Test IDs:	1.3.6.1.4.1.25623.1.0.140194 1.3.6.1.4.1.25623.1.0.107169
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9256 BugTraq ID: 96464 http://www.securityfocus.com/bid/96464