CVE-2024-20279

Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability

Published Aug 28, 2024 CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Description

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) policies, on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete child policies created under default system policies, which are implicitly used by all tenants in the fabric, resulting in disruption of network traffic. Exploitation is not possible for policies under tenants that an attacker has no authorization to access.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Application Policy Infrastructure Controller (APIC)

unknown

Version	Status	Constraints
`3.2(8d)`	affected	—
`2.2(1o)`	affected	—
`1.2(2h)`	affected	—
`2.2(2i)`	affected	—
`1.2(1k)`	affected	—
`2.2(1k)`	affected	—
`3.1(2m)`	affected	—
`3.2(1m)`	affected	—
`3.2(5e)`	affected	—
`4.1(2m)`	affected	—
`3.2(41d)`	affected	—
`1.1(1o)`	affected	—
`1.2(1m)`	affected	—
`1.2(2j)`	affected	—
`2.2(4r)`	affected	—
`2.2(3j)`	affected	—
`1.1(3f)`	affected	—
`2.2(2f)`	affected	—
`1.1(4m)`	affected	—
`2.2(2k)`	affected	—
`2.1(1i)`	affected	—
`2.0(1p)`	affected	—
`3.1(2p)`	affected	—
`3.2(3s)`	affected	—
`4.0(3c)`	affected	—
`1.1(4e)`	affected	—
`4.1(1k)`	affected	—
`2.2(4f)`	affected	—
`2.1(3h)`	affected	—
`3.2(4d)`	affected	—
`2.0(1n)`	affected	—
`2.0(1m)`	affected	—
`2.0(1r)`	affected	—
`2.1(2e)`	affected	—
`4.2(2e)`	affected	—
`4.2(3j)`	affected	—
`4.2(3n)`	affected	—
`2.0(1l)`	affected	—
`2.2(2e)`	affected	—
`2.2(3r)`	affected	—
`3.0(2k)`	affected	—
`2.1(3g)`	affected	—
`4.0(1h)`	affected	—
`2.0(1o)`	affected	—
`2.2(3p)`	affected	—
`1.2(3e)`	affected	—
`2.2(3s)`	affected	—
`2.0(2g)`	affected	—
`4.1(1l)`	affected	—
`3.2(9f)`	affected	—
`4.2(3l)`	affected	—
`4.2(2g)`	affected	—
`1.2(3c)`	affected	—
`3.2(7k)`	affected	—
`1.3(2h)`	affected	—
`3.2(9b)`	affected	—
`1.3(2k)`	affected	—
`3.1(2t)`	affected	—
`1.1(2h)`	affected	—
`3.2(3j)`	affected	—
`2.1(2k)`	affected	—
`2.3(1f)`	affected	—
`1.2(3h)`	affected	—
`3.0(1i)`	affected	—
`4.1(2u)`	affected	—
`4.2(1l)`	affected	—
`4.1(1a)`	affected	—
`4.0(3d)`	affected	—
`1.1(4l)`	affected	—
`2.3(1i)`	affected	—
`3.1(2q)`	affected	—
`3.2(4e)`	affected	—
`4.1(1i)`	affected	—
`3.1(1i)`	affected	—
`2.0(2m)`	affected	—
`3.0(2h)`	affected	—
`2.2(2q)`	affected	—
`2.3(1l)`	affected	—
`1.3(1h)`	affected	—
`3.0(2n)`	affected	—
`3.2(5f)`	affected	—
`1.2(1h)`	affected	—
`3.2(1l)`	affected	—
`4.2(1i)`	affected	—
`4.1(2o)`	affected	—
`1.2(1i)`	affected	—
`1.3(1j)`	affected	—
`2.1(1h)`	affected	—
`2.0(2l)`	affected	—
`2.0(2h)`	affected	—
`1.2(2g)`	affected	—
`3.0(1k)`	affected	—
`4.2(1g)`	affected	—
`2.1(2g)`	affected	—
`2.0(1q)`	affected	—
`1.1(1j)`	affected	—
`4.1(2g)`	affected	—
`1.1(1r)`	affected	—
`4.2(2f)`	affected	—
`3.2(6i)`	affected	—
`1.3(1g)`	affected	—
`1.3(2j)`	affected	—
`1.3(2i)`	affected	—
`2.0(2o)`	affected	—
`2.2(4q)`	affected	—
`2.3(1o)`	affected	—
`3.2(3i)`	affected	—
`2.2(2j)`	affected	—
`1.1(1d)`	affected	—
`2.0(2n)`	affected	—
`2.2(3t)`	affected	—
`3.2(3n)`	affected	—
`1.1(4g)`	affected	—
`4.1(2x)`	affected	—
`3.2(5d)`	affected	—
`3.1(2o)`	affected	—
`1.2(2i)`	affected	—
`2.1(2f)`	affected	—
`1.3(2f)`	affected	—
`4.2(3q)`	affected	—
`4.1(1j)`	affected	—
`2.0(2f)`	affected	—
`2.3(1e)`	affected	—
`1.1(1s)`	affected	—
`3.1(2v)`	affected	—
`4.1(2w)`	affected	—
`1.1(4i)`	affected	—
`3.1(2u)`	affected	—
`1.1(4f)`	affected	—
`3.0(2m)`	affected	—
`2.0(1k)`	affected	—
`3.2(2o)`	affected	—
`3.2(3r)`	affected	—
`1.1(2i)`	affected	—
`4.0(2c)`	affected	—
`1.3(1i)`	affected	—
`4.1(2s)`	affected	—
`3.2(7f)`	affected	—
`1.2(3m)`	affected	—
`3.2(3o)`	affected	—
`3.1(2s)`	affected	—
`3.2(2l)`	affected	—
`4.2(1j)`	affected	—
`2.3(1p)`	affected	—
`2.1(4a)`	affected	—
`1.1(1n)`	affected	—
`2.2(1n)`	affected	—
`2.2(4p)`	affected	—
`2.1(3j)`	affected	—
`4.2(4i)`	affected	—
`3.2(9h)`	affected	—
`5.0(1k)`	affected	—
`4.2(4k)`	affected	—
`5.0(1l)`	affected	—
`5.0(2e)`	affected	—
`4.2(4o)`	affected	—
`4.2(4p)`	affected	—
`5.0(2h)`	affected	—
`4.2(5k)`	affected	—
`4.2(5l)`	affected	—
`4.2(5n)`	affected	—
`5.1(1h)`	affected	—
`4.2(6d)`	affected	—
`5.1(2e)`	affected	—
`4.2(6g)`	affected	—
`4.2(6h)`	affected	—
`5.1(3e)`	affected	—
`3.2(10e)`	affected	—
`4.2(6l)`	affected	—
`4.2(7f)`	affected	—
`5.1(4c)`	affected	—
`4.2(6o)`	affected	—
`5.2(1g)`	affected	—
`5.2(2e)`	affected	—
`4.2(7l)`	affected	—
`3.2(10f)`	affected	—
`5.2(2f)`	affected	—
`5.2(2g)`	affected	—
`4.2(7q)`	affected	—
`5.2(2h)`	affected	—
`5.2(3f)`	affected	—
`5.2(3e)`	affected	—
`5.2(3g)`	affected	—
`4.2(7r)`	affected	—
`4.2(7s)`	affected	—
`5.2(4d)`	affected	—
`5.2(4e)`	affected	—
`4.2(7t)`	affected	—
`5.2(5d)`	affected	—
`3.2(10g)`	affected	—
`5.2(5c)`	affected	—
`6.0(1g)`	affected	—
`4.2(7u)`	affected	—
`5.2(5e)`	affected	—
`5.2(4f)`	affected	—
`5.2(6e)`	affected	—
`6.0(1j)`	affected	—
`5.2(6g)`	affected	—
`5.2(7f)`	affected	—
`4.2(7v)`	affected	—
`5.2(7g)`	affected	—
`6.0(2h)`	affected	—
`4.2(7w)`	affected	—
`5.2(6h)`	affected	—
`5.2(4h)`	affected	—
`5.2(8d)`	affected	—
`6.0(2j)`	affected	—
`5.2(8e)`	affected	—
`6.0(3d)`	affected	—
`6.0(3e)`	affected	—
`5.2(8f)`	affected	—
`5.2(8g)`	affected	—
`5.3(1d)`	affected	—
`5.2(8h)`	affected	—
`6.0(4c)`	affected	—
`5.3(2a)`	affected	—
`5.2(8i)`	affected	—
`6.0(5h)`	affected	—
`5.3(2b)`	affected	—
`6.0(3g)`	affected	—
`6.0(5j)`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1d\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1j\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1n\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1o\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1r\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1s\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(2h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(2i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(3f\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4e\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4f\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4g\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4l\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4m\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1k\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1m\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2g\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2j\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3c\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3e\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3m\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1g\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1j\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2f\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2j\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2k\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1k\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1l\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1m\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1n\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1o\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1p\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1q\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1r\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2f\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2g\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2l\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2m\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2n\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2o\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(1h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(1i\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2e\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2f\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2g\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2k\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3g\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3h\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3j\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(4a\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1k\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1n\):::::::*
	cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2q\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3p\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3r\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3s\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3t\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4p\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4q\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4r\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1p\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(1i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(1k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2m\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2n\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(1i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2m\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2p\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2q\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2s\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2t\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2u\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2v\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(1l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(1m\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(2l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(2o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3n\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3r\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3s\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(4d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(4e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(5d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(5e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(5f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(6i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(7f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(7k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(8d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(9b\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(9f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(9h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(10e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(10f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(10g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(41d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(1h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(2c\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(3c\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(3d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1a\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2m\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2s\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2u\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2w\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2x\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(2e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(2f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(2g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3n\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3q\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4p\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(5k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(5l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(5n\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6o\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7q\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7r\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7s\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7t\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7u\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7v\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7w\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(1k\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(1l\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(2e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(2h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(1h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(2e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(3e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(4c\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(1g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(3e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(3f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(3g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(5c\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(5d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(5e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(6e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(6g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(6h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(7f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(7g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8f\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8i\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.3\(1d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.3\(2a\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.3\(2b\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(1g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(1j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(2h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(2j\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(3d\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(3e\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(3g\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(4c\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(5h\):::::::*
cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(5j\):::::::*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-17994	A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) policies, on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete child policies created under default system policies, which are implicitly used by all tenants in the fabric, resulting in disruption of network traffic. Exploitation is not possible for policies under tenants that an attacker has no authorization to access.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.319% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-cousmo-uBpBYGbq

History

Aug 1, 2025 3:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco application Policy Infrastructure Controller
CPEs		cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1r\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1s\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(2i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(3f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3c\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1p\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1q\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1r\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(1h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(4a\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2q\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3p\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3r\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3s\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3t\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4p\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4q\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4r\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1p\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(1k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\(2n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2p\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2q\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2s\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2t\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2u\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.1\(2v\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(10e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(10f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(10g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(1l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(1m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(2l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(2o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3r\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(3s\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(41d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(4d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(4e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(5d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(5e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(5f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(6i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(7f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(7k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(8d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(9b\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(9f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.2\(9h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(1h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(2c\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(3c\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.0\(3d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1a\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(1l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2m\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2s\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2u\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2w\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\(2x\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(1l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(2e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(2f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(2g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(3q\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(4p\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(5k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(5l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(5n\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6o\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7q\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7r\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7s\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7t\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7u\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7v\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(7w\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(1k\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(1l\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(2e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.0\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(1h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(2e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(3e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.1\(4c\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(1g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(3e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(3f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(3g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(4h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(5c\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(5d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(5e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(6e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(6g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(6h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(7f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(7g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8f\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.2\(8i\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.3\(1d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.3\(2a\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:5.3\(2b\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(1g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(1j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(2h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(2j\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(3d\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(3e\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(3g\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(4c\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(5h\):::::::* cpe:2.3:a:cisco:application_policy_infrastructure_controller:6.0\(5j\):::::::*
Vendors & Products		Cisco Cisco application Policy Infrastructure Controller

Aug 28, 2024 6:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 28, 2024 4:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) policies, on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete child policies created under default system policies, which are implicitly used by all tenants in the fabric, resulting in disruption of network traffic. Exploitation is not possible for policies under tenants that an attacker has no authorization to access.
Title		Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability
Weaknesses		CWE-284
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-cousmo-uBpBYGbq
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}`