158 matches found
CVE-2016-1420
The installation component on Cisco Application Policy Infrastructure Controller APIC devices with software before 1.32f mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347...
Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability
A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to the use of incorrect installation and permissions settings for binary files...
CVE-2016-1386
The API in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.01 allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521...
New Relic: CSRF - Delete all empty application policy
A CSRF vulnerability is found in the application, using which an attacker can delete all empty application policy. Steps to reproduce Create a html file using following code: send it to victim. Note : Make sure you change the account id to the victims id...
Cisco Application Policy Infrastructure Controller and Nexus 9000 ACI Mode Switches Security Bypass Vulnerability
Cisco Application Policy Infrastructure Controllers and Cisco Nexus 9000 Series ACI Mode Switches are both products of the American company Cisco. The former is a controller that automates the management of application-centric infrastructure ACI. The latter is an application-centric infrastructur...
Cisco Application Policy Infrastructure Controller Enterprise Module Cross-Site Scripting Vulnerability
Cisco Application Policy Infrastructure Controller Enterprise is an application policy infrastructure control module. A cross-site scripting vulnerability exists in Cisco Application Policy Infrastructure Controller Enterprise, which allows remote attackers to exploit the vulnerability to inject...
Cisco Application Policy Infrastructure Controller Cross Site Scripting Vulnerability (cisco-sa-20160208-apic)
Cisco Application Policy Infrastructure Controller is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Cisco Application Policy Infrastructure Controller Enterprise Module Detection (HTTP)
HTTP based detection of Cisco Application Policy Infrastructure Controller Enterprise Module. Note: When HTTP credentials are given, the script is able to extract version and patch information from the application. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpte...
Cisco Application Policy Infrastructure Controller Detection (HTTP)
HTTP based detection of Cisco Application Policy Infrastructure Controller. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2016-1318
Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489...
CVE-2016-1302
Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...
Cisco Application Policy Infrastructure Controller Access Control Vulnerability
A vulnerability in the role-based access control RBAC of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated remote user to make configuration changes outside of their configured access privileges. The vulnerability is due to eligibility logic in the RBAC...
Cisco Application Policy Infrastructure Controller Local Privileging Vulnerability
The Cisco Application Policy Infrastructure Controller is a controller that automates the management of application-centric infrastructure ACI. A security vulnerability exists in the Cisco Application Policy Infrastructure Controller that allows a local attacker to gain root privileges...
Cisco Application Policy Infrastructure Controller privilege escalation
It's possible to obtain root access...
Cisco Application Policy Infrastructure Controllers and Nexus 9000 Series ACI Mode Switches Unauthorized Access Vulnerability
Cisco Application Policy Infrastructure is a controller that automates the management of application-centric infrastructures.Cisco Nexus 9000 Series ACI Mode Switches The Cisco Nexus 9000 Series ACI Mode Switches are 9000 series switches for application-centric infrastructure ACI. An unauthorized...
Cisco Application Policy Infrastructure Controller Unauthorized Access Vulnerability
A vulnerability in the role-based access control RBAC of the Cisco Application Policy Infrastructure Controller Cisco APIC could allow an authenticated, remote attacker to have read access to certain information stored in the affected system. The vulnerability is due to improper handling of RBAC...
CVE-2013-0150
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...