PT-2015-7187 · Cisco · Cisco Application Policy Infrastructure Controller
CVE-2015-6333
·
Published
2015-10-16
·
Updated
2016-12-09
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Cisco Application Policy Infrastructure Controller (APIC) version 1.1j
Description
The issue allows local users to gain privileges through certain vectors involving the addition of an SSH key.
Recommendations
For Cisco Application Policy Infrastructure Controller (APIC) version 1.1j, consider restricting access to SSH key addition functionality as a temporary workaround until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Application Policy Infrastructure Controller