CVE-2015-6424: High severity cisco application policy infrastructure controller (apic) vulnerability
Published Dec 18, 2015
·Updated
The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via unspecified vectors, aka Bug ID CSCuu83985.
Affected Software
1 affected component
Cisco Application Policy Infrastructure Controller=1.1\(0.920a\)
Event History
Dec 18, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6424?
CVE-2015-6424 has a high severity rating due to its potential to allow unauthorized root access.
2
How do I fix CVE-2015-6424?
To mitigate CVE-2015-6424, upgrade to a version of Cisco APIC beyond 1.1(0.920a) that addresses the vulnerability.
3
Who is affected by CVE-2015-6424?
CVE-2015-6424 affects users of Cisco Application Policy Infrastructure Controller version 1.1(0.920a).
4
What type of access does CVE-2015-6424 allow?
CVE-2015-6424 allows local users to bypass access restrictions and obtain root access in single-user mode.
5
When was CVE-2015-6424 reported?
CVE-2015-6424 was reported on December 16, 2015.