Lucene search
HistoryJun 27, 2015 - 10:59 a.m.
CVE-2015-4225
cisco
apic
nexus 9000
rbac
health scoring
vulnerability
cve-2015-4225
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.
Affected configurations
Node
cisconx-osMatch1.0\(1.110a\)
ORcisconx-osMatch1.0\(1e\)
cisconexus_93120txMatch-
ORcisconexus_93128txMatch-
ORcisconexus_9332pqMatch-
ORcisconexus_9336pq_aci_spineMatch-
ORcisconexus_9372pxMatch-
ORcisconexus_9372txMatch-
ORcisconexus_9396pxMatch-
ORcisconexus_9396txMatch-
ORcisconexus_9504Match-
ORcisconexus_9508Match-
ORcisconexus_9516Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:nx-os | cisco nx-os | eq | 1.0\(1.110a\) |
| cisco:nx-os | cisco nx-os | eq | 1.0\(1e\) |
Related
nessus
nessus
cisco
cisco
nvd
nvd
CVE-2015-4225
2015-06-27 10:59:01
cvelist
cvelist
CVE-2015-4225
2015-06-27 10:00:00
prion
prion
Design/Logic Flaw
2015-06-27 10:59:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
Related for CVE-2015-4225