CVEvulnerability
CVE-2015-4225
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.
Affected configurations
• cisco nx-os 1.0\(1.110a\)
• cisco nx-os 1.0\(1e\)
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39529 Vendor Advisory
- http://www.securityfocus.com/bid/75433 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032735 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39529 Vendor Advisory
- http://www.securityfocus.com/bid/75433 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032735 Third Party Advisory, VDB Entry