Summary
Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen im Cisco Application Policy Infrastructure Controller ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen oder seine Privilegien zu erweitern.
Product
Der Cisco Application Policy Infrastructure Controller (APIC) ist die architektonische Hauptkomponente der Cisco Application Centric Infrastructure.
Vulnerabilities 2
-
Medium 6.5
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote attacker with Administrator-level privilege…
-
Medium 4.3
Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) pol…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-apic-cousmo-uBpBYGbq vom 2024-08-28
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-cousmo-uBpBYGbq
-
Cisco Security Advisory cisco-sa-capic-priv-esc-uYQJjnuU vom 2024-08-28
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-priv-esc-uYQJjnuU