Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
Vulnerability Description
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system. This vulnerability is due to an insufficient role-based access control (RBAC). An attacker with Administrator read-only credentials could exploit this vulnerability by sending a specific API request using an app with admin write credentials. A successful exploit could allow the attacker to elevate privileges to Administrator with write privileges on the affected device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Vulnerability Type
带着不必要的权限执行
Vulnerability Title
Cisco Application Policy Infrastructure Controller 授权问题漏洞
Vulnerability Description
Cisco Application Policy Infrastructure Controller（APIC）是美国思科（Cisco）公司的一款自动化的基础架构部署和治理解决方案。 Cisco Application Policy Infrastructure Controller 存在授权问题漏洞，该漏洞源于基于角色的访问控制 (RBAC) 不足所致。具有管理员只读凭据的攻击者可以通过使用具有管理员写入凭据的应用程序发送特定 API 请求来利用此漏洞。成功的漏洞利用可能允许攻击者将权限提升为对受影响设
CVSS Information
N/A
Vulnerability Type
N/A