The vulnerability of the Web interface of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary code within the context of the vulnerable interface or gain access to confidential information.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the vulnerable interface or gain...

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to root level.

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller information infrastructure is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

CVE-2019-1586

A vulnerability in Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on loca...

CVE-2019-1692

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certa...

CVE-2019-1838: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability...

CVE-2019-1586: Incomplete Cleanup

A vulnerability in Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on loca...

CVE-2019-1692: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certa...

CVE-2019-1682: Improper Input Validation

A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller APIC software could allow an authenticated, local attacker to escalate privileges to root on an affected device. The vulnerability is due to insufficient input validation for certain comman...

PT-2019-2117

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC Software affected versions not specified Description A vulnerability in Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, local attacker wit...

PT-2019-2056

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller affected versions not specified Description The issue is related to insufficient access control in the FUSE filesystem functionality, which could allow an authenticated, local attacker to...

PT-2019-2067

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC versions prior to 14.11i Description A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote...

PT-2019-2068

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow ...

Cisco Application Policy Infrastructure Controller Linux Kernel IP Fragment Reassembly DoS

According to its self-reported version, the Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability in the IP stack that is used by the Linux Kernel publicly known as FragmentSmack. The vulnerability could allow an unauthenticated, remote attacker to cause a denial ...

The vulnerability of the Cisco Application Policy Infrastructure Controller, related to deficiencies in access control, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Cisco Application Policy Infrastructure Controller, a component of the information infrastructure management system, is related to deficiencies in access control when connecting via IPv6 protocol. Exploiting this vulnerability could allow an attacker acting locally to gai...

CVE-2019-1690: Improper Access Control

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller APIC software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6...

Cisco Application Policy Infrastructure Controller Access Control Error Vulnerability

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. An access control error vulnerability exists in the management interface in Cisco APIC, which stems from the program's lack of an access control mechanism for IPv6...

PT-2019-1550

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller versions prior to 4.20.21c Description The issue is related to insufficient access control when connecting via IPv6, which could allow an attacker to gain unauthorized access to the device. Th...

Cisco Application Policy Infrastructure Controller Local Command Injection and Privilege Escalation Vulnerability

A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute arbitrary commands with root privileges on an affected host operating system...

Cisco APIC-EM 1.x < 1.5 Unauthorized Access (credentialed check)

According to its self-reported version number, the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM application running on the remote host is 1.x prior to 1.5. It is, therefore, affected by a vulnerability within the firewall configuration of the Cisco Application Poli...

PT-2017-12437

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller Enterprise Module versions prior to 1.5 Description A misconfiguration in the firewall configuration could allow an unauthenticated, adjacent attacker to gain privileged access to services on...