9

CVE-2016-1302

Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ X14j Firmware Version t-ms14jakucb-1102.5
Sun ≫ Opensolaris Version snv_124 Edition sparc
Zyxel ≫ Gs1900-10hp Firmware Version < 2.50\(aazi.0\)c0
Zzinc ≫ Keymouse Firmware Version 3.08 SwPlatform windows
Cisco ≫ Nx-os Version base
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 93108tc-ex Version -
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 93180yc-ex Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 9336pq Aci Spine Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -
Sun ≫ Opensolaris Version snv_124 Edition sparc
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 93108tc-ex Version -
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 93180yc-ex Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 9336pq Aci Spine Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -
Zyxel ≫ Gs1900-10hp Firmware Version < 2.50\(aazi.0\)c0
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 93108tc-ex Version -
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 93180yc-ex Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 9336pq Aci Spine Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -
Zzinc ≫ Keymouse Firmware Version 3.08 SwPlatform windows
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 93108tc-ex Version -
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 93180yc-ex Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 9336pq Aci Spine Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.18% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-apic
Vendor Advisory
http://www.securitytracker.com/id/1034925