CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: in f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem and websafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in icontrol rest may lead to commands being executed with different privilege levels than expected.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-12-21
Last Modified Date: 2018-01-09