156 matches found
CVE-2019-1692
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certa...
CVE-2019-1586: Incomplete Cleanup
A vulnerability in Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on loca...
CVE-2019-1682: Improper Input Validation
A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller APIC software could allow an authenticated, local attacker to escalate privileges to root on an affected device. The vulnerability is due to insufficient input validation for certain comman...
CVE-2019-1838: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability...
CVE-2019-1692: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certa...
PT-2019-2117
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC Software affected versions not specified Description A vulnerability in Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, local attacker wit...
PT-2019-2056
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller affected versions not specified Description The issue is related to insufficient access control in the FUSE filesystem functionality, which could allow an authenticated, local attacker to...
PT-2019-2068
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow ...
PT-2019-2067
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC versions prior to 14.11i Description A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote...
Cisco Application Policy Infrastructure Controller Linux Kernel IP Fragment Reassembly DoS
According to its self-reported version, the Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability in the IP stack that is used by the Linux Kernel publicly known as FragmentSmack. The vulnerability could allow an unauthenticated, remote attacker to cause a denial ...
CVE-2019-1690: Improper Access Control
A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...
PT-2019-1550
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller versions prior to 4.20.21c Description The issue is related to insufficient access control when connecting via IPv6, which could allow an attacker to gain unauthorized access to the device. Th...
Cisco Application Policy Infrastructure Controller Local Command Injection and Privilege Escalation Vulnerability
A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...
Cisco APIC-EM 1.x < 1.5 Unauthorized Access (credentialed check)
According to its self-reported version number, the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM application running on the remote host is 1.x prior to 1.5. It is, therefore, affected by a vulnerability within the firewall configuration of the Cisco Application Poli...
CVE-2017-12262: Improper Access Control
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...
PT-2017-12437
Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller Enterprise Module versions prior to 1.5 Description A misconfiguration in the firewall configuration could allow an unauthenticated, adjacent attacker to gain privileged access to services on...
Cisco Releases Security Updates
Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...
Design/Logic Flaw
A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...
Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability
The Cisco Application Policy Infrastructure Controller is Cisco's robust all-in-one architecture for transport networks. A security vulnerability in the Cisco Application Policy Infrastructure Controller RBAC privilege assignment allows remote attackers to exploit the vulnerability by submitting...
CVE-2017-6767: Improper Privilege Management
A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...