CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: in f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem and websafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in icontrol rest may lead to commands being executed with different privilege levels than expected.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-12-21
Last Modified Date: 2018-01-09
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition').
user
CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: in f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem and websafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in icontrol rest may lead to commands being executed with different privilege levels than expected.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-12-21
Last Modified Date: 2018-01-09
assistant