EUVD-2024-18017

Malicious code in bioql PyPI...

The vulnerability in the implementation of TLS and SSL protocols in Cisco Nexus Dashboard Orchestrator (NDO) allows a perpetrator to disclose protected information.

The vulnerability of the TLS and SSL protocol implementations in Cisco Nexus Dashboard Orchestrator NDO relates to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2024-20385

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...

CVE-2024-20385

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...

CVE-2024-20385

The CVE-2024-20385 entry concerns Cisco Nexus Dashboard Orchestrator (NDO) SSL/TLS certificate validation. The vulnerability stems from the NDO Validate Peer Certificate site management feature, which validates certificates for APIC, CNC, and Cisco Nexus Dashboard only when a new site is added or...

PT-2024-7426 · Cisco · Cisco Nexus Dashboard Fabric Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard Fabric Controller NDFC and Cisco Nexus Dashboard Orchestrator NDO affected versions not specified Description: The issue is related to a logging function in Cisco Nexus Dashboard Fabric Controller NDFC and Cisco Nexus...

CVE-2024-20302

A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant security. An attacker who i...

CVE-2024-20302

A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant security. An attacker who i...

CVE-2024-20302

A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant security. An attacker who i...

CVE-2024-20302

A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant security. An attacker who i...

Cisco Nexus Dashboard Orchestrator Unauthorized Policy Actions Vulnerability

A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant security. An attacker who i...

Vulnerability fixed in Cisco ACI Multi-Site Orchestrator

Cisco has fixed a vulnerability in ACI Multi-Site Orchestrator. An authenticated malicious party can exploit the exploit the vulnerability to grant itself elevated privileges and execute commands under Administrator privileges. Cisco has released updates to fix the vulnerability in ACI Multi-Site...