Spoofing Vulnerability in Cisco Application Policy Infrastructure Controller

CVE-2016-1386

Summary

A vulnerability exists in the API of Cisco's Application Policy Infrastructure Controller (APIC-EM) version 1.0(1), which allows remote attackers to impersonate administrative notifications. This is achieved through the use of specially crafted attribute-value pairs, potentially leading to unauthorized access or information disclosure, as identified in Bug ID CSCux15521. Organizations using this product should review the associated security advisory to implement necessary mitigating steps.

References