CVE-2019-1690

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...

CVE-2019-1690: Improper Access Control

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...

Cisco Application Policy Infrastructure Controller Access Control Error Vulnerability

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. An access control error vulnerability exists in the management interface in Cisco APIC, which stems from the program's lack of an access control mechanism for IPv6...

PT-2019-1550

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller versions prior to 4.20.21c Description The issue is related to insufficient access control when connecting via IPv6, which could allow an attacker to gain unauthorized access to the device. Th...

XenMobile : How To Create an App Configuration Policy for iOS

How to implement an application configuration policy...

CVE-2018-5549

On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response containing certain elements...

CVE-2018-5528

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

The vulnerability of the system scripts of the automation software Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of system scripts in the automation software Application Policy Infrastructure Controller, when installed during the download process, is related to the lack of measures to neutralize special elements used in commands. Exploiting this vulnerability allows an attacker to enhance...

CVE-2017-12352

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...

CVE-2017-12352

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...

CVE-2017-12352

CVE-2017-12352 affects Cisco Application Policy Infrastructure Controller (APIC). A local privilege-escalation is possible through improper validation of input to boot-time system script files, allowing an authenticated attacker with valid admin credentials to execute arbitrary commands with root...

CVE-2017-12352: Improper Neutralization of Special Elements used in a Command

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...

Cisco Application Policy Infrastructure Controller Local Command Injection and Privilege Escalation Vulnerability

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...

PT-2017-3327

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controllers affected versions not specified Description A vulnerability in system script files installed at boot time could allow an authenticated, local attacker to gain elevated privileges and execute...

Cisco APIC-EM 1.x < 1.5 Unauthorized Access (credentialed check)

According to its self-reported version number, the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM application running on the remote host is 1.x prior to 1.5. It is, therefore, affected by a vulnerability within the firewall configuration of the Cisco Application Poli...

PT-2017-12437

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller Enterprise Module versions prior to 1.5 Description A misconfiguration in the firewall configuration could allow an unauthenticated, adjacent attacker to gain privileged access to services on...

CVE-2017-12262: Improper Access Control

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

The vulnerability lies in the built-in procedure executed by the system during the loading of the automation software for Application Policy Infrastructure Controller. This vulnerability allows a perpetrator to increase their privileges, gain access to root directories, and exercise full control over the device.

The vulnerability of the built-in procedure for executing system files during the installation of the Application Policy Infrastructure Controller software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to increase their...

CVE-2017-6767

A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...