NVD

Id
17716  
Name
CVE-2016-1302  
Description
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-02-07  
Modified Date
2016-12-05  
Seq
2016-1302  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97572 17716 CVE-2016-1302 20160203 Cisco Application Policy Infrastructure Controller Access Control Vulnerability  View
97573 17716 CVE-2016-1302 1034925  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
833 JVNDB-2016-001606 Cisco Application Policy Infrastructure Controller デバイスのソフトウェアおよび Nexus 9000 ACI Mode スイッチのソフトウェアにおける RBAC 制限を回避される脆弱性 Cisco Application Policy Infrastructure Controller (APIC) デバイスのソフトウェアおよび Nexus 9000 ACI Mode スイッチのソフトウェアには、RBAC 制限を回避される脆弱性が存在します。 CVE-2016-1302 87808 CVE-2016-1302 17716 9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001606.html 2016-02-03 2016-03-16 View