6.5

CVE-2026-76488

Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.

This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco Application Policy Infrastructure Controller (APIC)
Default Statusunknown
Version 5.2(1g)
Status affected
Version 5.2(2e)
Status affected
Version 5.2(2f)
Status affected
Version 5.2(2g)
Status affected
Version 5.2(2h)
Status affected
Version 5.2(3f)
Status affected
Version 5.2(3e)
Status affected
Version 5.2(3g)
Status affected
Version 5.2(4d)
Status affected
Version 5.2(4e)
Status affected
Version 5.2(5d)
Status affected
Version 5.2(5c)
Status affected
Version 6.0(1g)
Status affected
Version 5.2(5e)
Status affected
Version 5.2(4f)
Status affected
Version 5.2(6e)
Status affected
Version 6.0(1j)
Status affected
Version 5.2(6g)
Status affected
Version 5.2(7f)
Status affected
Version 5.2(7g)
Status affected
Version 6.0(2h)
Status affected
Version 5.2(6h)
Status affected
Version 5.2(4h)
Status affected
Version 5.2(8d)
Status affected
Version 6.0(2j)
Status affected
Version 5.2(8e)
Status affected
Version 6.0(3d)
Status affected
Version 6.0(3e)
Status affected
Version 5.2(8f)
Status affected
Version 5.2(8g)
Status affected
Version 5.3(1d)
Status affected
Version 5.2(8h)
Status affected
Version 6.0(4c)
Status affected
Version 5.3(2a)
Status affected
Version 5.2(8i)
Status affected
Version 6.0(5h)
Status affected
Version 5.3(2b)
Status affected
Version 6.0(3g)
Status affected
Version 6.0(5j)
Status affected
Version 5.3(2c)
Status affected
Version 6.0(6c)
Status affected
Version 6.1(1f)
Status affected
Version 6.0(7e)
Status affected
Version 5.3(2d)
Status affected
Version 6.0(8d)
Status affected
Version 6.0(8e)
Status affected
Version 6.1(2f)
Status affected
Version 6.0(8f)
Status affected
Version 5.3(2e)
Status affected
Version 6.1(2g)
Status affected
Version 5.3(2f)
Status affected
Version 6.0(9c)
Status affected
Version 6.0(9d)
Status affected
Version 6.0(6g)
Status affected
Version 6.0(6h)
Status affected
Version 6.0(8h)
Status affected
Version 6.0(9e)
Status affected
Version 6.0(9f)
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 6.5 1.2 5.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-info-priv-enAdB5vD