VYPR
High severity7.5NVD Advisory· Published May 9, 2017· Updated Jun 17, 2026

CVE-2016-9256

CVE-2016-9256

Description

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change.

Affected products

2
  • F5, Inc./Big IPllm-fuzzy2 versions
    12.1.0 - 12.1.2+ 1 more
    • (no CPE)range: 12.1.0 - 12.1.2
    • (no CPE)range: 12.1.0-12.1.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.