CVE-2015-4235

Published: Jul 24, 2015Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j) and Nexus 9000 ACI devices with software before 11.0(4o) and 11.1 before 11.1(1j) do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain root privileges via unspecified use of the APIC cluster-management configuration feature, aka Bug IDs CSCuu72094 and CSCuv11991.

Affected (12)

Products: Cisco: Application Policy Infrastructure Controller (apic), Nx Os

Cisco

2 products

Application Policy Infrastructure Controller (apic)

Nx Os

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Cisco Application Policy Infrastructure Controller (apic)	Version 1.0(1e)
Cisco Nx Os	Version 11.0(1b)
Cisco Nx Os	Version 11.0(1c)
Cisco Nx Os	Version 11.0(1d)
Cisco Nx Os	Version 11.0(1e)
Cisco Nx Os	Version 11.0(2j)
Cisco Nx Os	Version 11.0(2m)
Cisco Nx Os	Version 11.0(3f)
Cisco Nx Os	Version 11.0(3i)
Cisco Nx Os	Version 11.0(3k)
Cisco Nx Os	Version 11.0(3n)
Cisco Nx Os	Version 11.0(4h)

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033025

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033025

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.