cnvd-2015-04981
Vulnerability from cnvd
Title
Cisco Application Policy Infrastructure Controllers和Nexus 9000 Series ACI Mode Switches未授权访问漏洞
Description
Cisco Application Policy Infrastructure是一款自动化管理以应用为中心的基础设施的控制器。Cisco Nexus 9000 Series ACI Mode Switches是一款应用于以应用为中心的基础设施（ACI）的9000系列交换机。 Cisco Application Policy Infrastructure Controllers和Cisco Nexus 9000 Series ACI Mode Switches存在未授权访问漏洞，允许远程攻击者可利用漏洞提交特殊请求未授权访问应用设备。
Severity
高
Patch Name
Cisco Application Policy Infrastructure Controllers和Nexus 9000 Series ACI Mode Switches未授权访问漏洞的补丁
Patch Description
Cisco Application Policy Infrastructure是一款自动化管理以应用为中心的基础设施的控制器。Cisco Nexus 9000 Series ACI Mode Switches是一款应用于以应用为中心的基础设施（ACI）的9000系列交换机。Cisco Application Policy Infrastructure Controllers和Cisco Nexus 9000 Series ACI Mode Switches存在未授权访问漏洞，允许远程攻击者可利用漏洞提交特殊请求未授权访问应用设备。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic

Reference
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic
Impacted products
Name
['Cisco Application Policy Infrastructure Controller (APIC) <1.0(3o)', 'Cisco Application Policy Infrastructure Controller (APIC) 1.1(<1.1(1j))', 'Cisco Nexus 9000 ACI <11.0(4o)', 'Cisco Nexus 9000 ACI 11.x(<11.1(1j))']
Show details on source website

To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "75994"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-4235"
    }
  },
  "description": "Cisco Application Policy Infrastructure\u662f\u4e00\u6b3e\u81ea\u52a8\u5316\u7ba1\u7406\u4ee5\u5e94\u7528\u4e3a\u4e2d\u5fc3\u7684\u57fa\u7840\u8bbe\u65bd\u7684\u63a7\u5236\u5668\u3002Cisco Nexus 9000 Series ACI Mode Switches\u662f\u4e00\u6b3e\u5e94\u7528\u4e8e\u4ee5\u5e94\u7528\u4e3a\u4e2d\u5fc3\u7684\u57fa\u7840\u8bbe\u65bd\uff08ACI\uff09\u76849000\u7cfb\u5217\u4ea4\u6362\u673a\u3002\r\n\r\nCisco Application Policy Infrastructure Controllers\u548cCisco Nexus 9000 Series ACI Mode Switches\u5b58\u5728\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u63d0\u4ea4\u7279\u6b8a\u8bf7\u6c42\u672a\u6388\u6743\u8bbf\u95ee\u5e94\u7528\u8bbe\u5907\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a \r\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-04981",
  "openTime": "2015-07-28",
  "patchDescription": "Cisco Application Policy Infrastructure\u662f\u4e00\u6b3e\u81ea\u52a8\u5316\u7ba1\u7406\u4ee5\u5e94\u7528\u4e3a\u4e2d\u5fc3\u7684\u57fa\u7840\u8bbe\u65bd\u7684\u63a7\u5236\u5668\u3002Cisco Nexus 9000 Series ACI Mode Switches\u662f\u4e00\u6b3e\u5e94\u7528\u4e8e\u4ee5\u5e94\u7528\u4e3a\u4e2d\u5fc3\u7684\u57fa\u7840\u8bbe\u65bd\uff08ACI\uff09\u76849000\u7cfb\u5217\u4ea4\u6362\u673a\u3002Cisco Application Policy Infrastructure Controllers\u548cCisco Nexus 9000 Series ACI Mode Switches\u5b58\u5728\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u63d0\u4ea4\u7279\u6b8a\u8bf7\u6c42\u672a\u6388\u6743\u8bbf\u95ee\u5e94\u7528\u8bbe\u5907\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Application Policy Infrastructure Controllers\u548cNexus 9000 Series ACI Mode Switches\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Application Policy Infrastructure Controller (APIC)  \u003c1.0(3o)",
      "Cisco Application Policy Infrastructure Controller (APIC)  1.1(\u003c1.1(1j))",
      "Cisco Nexus 9000 ACI \u003c11.0(4o)",
      "Cisco Nexus 9000 ACI 11.x(\u003c11.1(1j))"
    ]
  },
  "referenceLink": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic",
  "serverity": "\u9ad8",
  "submitTime": "2015-07-24",
  "title": "Cisco Application Policy Infrastructure Controllers\u548cNexus 9000 Series ACI Mode Switches\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.