Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability (CNVD-2021-68724)

Cisco Application Policy Infrastructure Controller (APIC) is an automated infrastructure deployment and governance solution from Cisco (USA).Cisco Application Policy Infrastructure An elevation of privilege vulnerability exists in the API endpoint of the Controller, which can be exploited by an attacker to obtain administrator credentials by sending specific API requests to Cisco APIC or Cloud APIC devices using unprivileged credentials from Cisco ACI Multi-Site Orchestrator (MSO).