Cisco NX-OS Python Scripting Engine Elevation of Privilege Vulnerability

Cisco NX-OS software is a data center-class operating system that embodies modular design, sustainability, and maintainability. A security vulnerability exists in Cisco NX-OS that allows a user with locally executable Python scripts to elevate privileges on the Python subsystem to execute arbitra...

PT-2015-2235

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.28a Description The issue is related to incomplete privilege separation of the Python scripting engine across multiple virtual device contexts VDCs in Cisco NX-OS. This allows an attacker with administrative privileges in...