Miembros de
Boletines de Vulnerabilidades |
Cisco Application Policy Infrastructure Controller Insecure Credentials Vulnerability |
|
| Software afectado | Cisco |
|
A vulnerability in the boot process of the Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to access the APIC as the root user.The vulnerability is due to improper implementation of access controls in the APIC system. An attacker could exploit this vulnerability by accessing the boot manager of the APIC. An exploit could allow the attacker to access the APIC as the root user and perform root-level commands in single-user mode.Cisco has More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151216-apic?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Application%20Policy%20Infrastructure%20Controller%20Insecure%20Crede |
|
