Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4199 State: PUBLISHED Published: 2015-06-27T10:00:00 Last Updated: 2024-08-06T06:04:02.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (NULL pointer free and module crash) by triggering intermittent connectivity with many IPv6 CPE devices, aka Bug ID CSCug47366. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032692 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39423 - http://www.securityfocus.com/bid/75335
CVE ID: CVE-2015-4200 State: PUBLISHED Published: 2015-06-23T10:00:00 Last Updated: 2024-08-06T06:04:02.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (memory consumption) by triggering an error during CPE negotiation, aka Bug ID CSCug00885. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032692 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39424 - http://www.securityfocus.com/bid/75254
CVE ID: CVE-2015-4201 State: PUBLISHED Published: 2015-06-20T10:00:00 Last Updated: 2024-08-06T06:04:02.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service (Session Manager restart) via an invalid TCP/IP header, aka Bug ID CSCut68058. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032677 - http://www.securityfocus.com/bid/75323 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39431
CVE ID: CVE-2015-4202 State: PUBLISHED Published: 2015-06-20T14:00:00 Last Updated: 2024-08-06T06:04:03.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032678 - http://www.securityfocus.com/bid/75321 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39432
CVE ID: CVE-2015-4203 State: PUBLISHED Published: 2015-06-23T14:00:00 Last Updated: 2024-08-06T06:04:03.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032692 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 - http://www.securityfocus.com/bid/75339
CVE ID: CVE-2015-4204 State: PUBLISHED Published: 2015-06-23T10:00:00 Last Updated: 2024-08-06T06:04:03.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of service (memory consumption or PXF process crash) by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032692 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39440 - http://www.securityfocus.com/bid/75337
CVE ID: CVE-2015-4205 State: PUBLISHED Published: 2015-06-23T14:00:00 Last Updated: 2024-08-06T06:04:03.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75352 - http://www.securitytracker.com/id/1032691 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39455
CVE ID: CVE-2015-4206 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T06:04:03.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034430 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151214-ucm - http://www.securityfocus.com/bid/79196
CVE ID: CVE-2015-4207 State: PUBLISHED Published: 2015-06-23T14:00:00 Last Updated: 2024-08-06T06:04:02.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75350 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39457 - http://www.securitytracker.com/id/1032705
CVE ID: CVE-2015-4208 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39458 - http://www.securityfocus.com/bid/75361 - http://www.securitytracker.com/id/1032705
CVE ID: CVE-2015-4209 State: PUBLISHED Published: 2015-06-23T14:00:00 Last Updated: 2024-08-06T06:11:11.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39459 - http://www.securityfocus.com/bid/75351 - http://www.securitytracker.com/id/1032705
CVE ID: CVE-2015-4210 State: PUBLISHED Published: 2015-06-23T14:00:00 Last Updated: 2024-08-06T06:11:11.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75348 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39460 - http://www.securitytracker.com/id/1032705
CVE ID: CVE-2015-4211 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39466 - http://www.securitytracker.com/id/1032704 - http://www.securityfocus.com/bid/75373
CVE ID: CVE-2015-4212 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39467 - http://www.securityfocus.com/bid/75381 - http://www.securitytracker.com/id/1032705
CVE ID: CVE-2015-4213 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032712 - http://www.securityfocus.com/bid/75378 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39469
CVE ID: CVE-2015-4214 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75380 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39470 - http://www.securitytracker.com/id/1032703
CVE ID: CVE-2015-4215 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75369 - http://www.securitytracker.com/id/1032697 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39472
CVE ID: CVE-2015-4216 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T06:11:11.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of a private key from another installation, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630. Additional Analyst Notes: - CVE Program Container: References: -
on, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport - http://www.securitytracker.com/id/1032725 - http://www.securitytracker.com/id/1032726 - http://www.securityfocus.com/bid/75417
CVE ID: CVE-2015-4217 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T06:11:11.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation, aka Bug IDs CSCus29681, CSCuu95676, and CSCuu96601. Additional Analyst Notes: - CVE Program Container: Re
installation, aka Bug IDs CSCus29681, CSCuu95676, and CSCuu96601. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport - http://www.securitytracker.com/id/1032725 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39461 - http://www.securitytracker.com/id/1032726 - http://www.securityfocus.com/bid/75418
CVE ID: CVE-2015-4218 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39494 - http://www.securitytracker.com/id/1032711 - http://www.securityfocus.com/bid/75377
CVE ID: CVE-2015-4219 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T06:11:11.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032713 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39501 - http:/
- http://www.securitytracker.com/id/1032713 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39501 - http://www.securityfocus.com/bid/75379 - http://www.securitytracker.com/id/1032714
CVE ID: CVE-2015-4220 State: PUBLISHED Published: 2015-06-25T16:00:00 Last Updated: 2024-08-06T06:11:11.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75407 - http://www.securitytracker.com/id/1032717 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39504
CVE ID: CVE-2015-4221 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T06:11:11.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39505 - http://www.securityfocus.com/bid/75401 - http://www.securitytrack
.cisco.com/security/center/viewAlert.x?alertId=39505 - http://www.securityfocus.com/bid/75401 - http://www.securitytracker.com/id/1032716
CVE ID: CVE-2015-4222 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T06:11:11.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39506 - http://www.securityfocus.com/bid/75400 - http://www.securitytracker.com/id/1032716
CVE ID: CVE-2015-4223 State: PUBLISHED Published: 2015-06-25T16:00:00 Last Updated: 2024-08-06T06:11:11.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) packets, aka Bug ID CSCuu77478. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032715 - http://www.securityfocus.com/bid/75399 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39509
CVE ID: CVE-2015-4224 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T06:11:11.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75415 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39517 - http://www.securitytracker.com/id/1032728
CVE ID: CVE-2015-4225 State: PUBLISHED Published: 2015-06-27T10:00:00 Last Updated: 2024-08-06T06:11:11.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75433 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39529 - http://www.securitytracker.com/id/1032735
CVE ID: CVE-2015-4226 State: PUBLISHED Published: 2015-06-30T15:00:00 Last Updated: 2024-08-06T06:11:11.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39554 - http://www.securitytracker.com/id/1032748 - http://www.securityfocus.com/bid/75471
CVE ID: CVE-2015-4227 State: PUBLISHED Published: 2015-06-30T10:00:00 Last Updated: 2024-08-06T06:11:11.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91838. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032747 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39555 - http://www.securityfocus.com/bid/75465
CVE ID: CVE-2015-4228 State: PUBLISHED Published: 2015-07-02T14:42:00 Last Updated: 2024-08-06T06:11:11.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of service (reboot) via malformed ad messages, aka Bug ID CSCur13999. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39556
CVE ID: CVE-2015-4229 State: PUBLISHED Published: 2015-06-30T10:00:00 Last Updated: 2024-08-06T06:11:11.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032749 - http://www.securityfocus.com/bid/75473 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39557
CVE ID: CVE-2015-4230 State: PUBLISHED Published: 2015-07-06T14:00:00 Last Updated: 2024-08-06T06:11:11.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91854. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032747 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39562 - http://www.securityfocus.com/bid/75464
CVE ID: CVE-2015-4231 State: PUBLISHED Published: 2015-07-03T10:00:00 Last Updated: 2024-08-06T06:11:12.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032763 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39568
CVE ID: CVE-2015-4232 State: PUBLISHED Published: 2015-07-03T10:00:00 Last Updated: 2024-08-06T06:11:12.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=39569 - http://www.securitytracker.com/id/1032764 - http://www.securityfocus.com/bid/75503
CVE ID: CVE-2015-4233 State: PUBLISHED Published: 2015-07-02T10:00:00 Last Updated: 2024-08-06T06:11:12.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75500 - http://www.securitytracker.com/id/1032766 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39570
CVE ID: CVE-2015-4234 State: PUBLISHED Published: 2015-07-03T10:00:00 Last Updated: 2024-08-06T06:11:11.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75502 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39571 - http://www.securitytracker.com/id/1032765
CVE ID: CVE-2015-4235 State: PUBLISHED Published: 2015-07-24T14:00:00 Last Updated: 2024-08-06T06:11:11.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j) and Nexus 9000 ACI devices with software before 11.0(4o) and 11.1 before 11.1(1j) do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain root privileges via unspecified use of the APIC cluster-management configuration feature, aka Bug IDs CSCuu72094 and CSCuv11991. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/
u72094 and CSCuv11991. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-apic - http://www.securitytracker.com/id/1033025