PT-2015-7187 · Cisco · Cisco Application Policy Infrastructure Controller

Publicado 2015-10-16 · Atualizado 2016-12-09 · CVE-2015-6333

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller (APIC) version 1.1j

Description The issue allows local users to gain privileges through certain vectors involving the addition of an SSH key.

Recommendations For Cisco Application Policy Infrastructure Controller (APIC) version 1.1j, consider restricting access to SSH key addition functionality as a temporary workaround until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-6333

Produtos afetados

Cisco Application Policy Infrastructure Controller

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151012-apic · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6333 · Nota de Segurança
• http://securitytracker.com/id/1033793 · Nota