CVE-2023-20230

CVE-2023-20230 affects Cisco Application Policy Infrastructure Controller (APIC). The issue arises from improper access control in the restricted security domain implementation used to enforce multi-tenancy, allowing an authenticated, remote attacker with a restricted-domain account to read, modi...

CVE-2023-20011

Cisco reports a CSRF/XSRF vulnerability in the web-based management interfaces of the Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller. The issue stems from insufficient CSRF protections, enabling an unauthenticated, remote attacker to coerce a user to perfor...