CVE-2016-1386: High severity cisco application policy infrastructure controller (apic) vulnerability
Published Apr 28, 2016
·Updated
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.
Affected Software
1 affected component
Cisco Application Policy Infrastructure Controller Enterprise Module=1.0.\(1\)
Event History
Apr 28, 2016
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1386?
CVE-2016-1386 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-1386?
To remediate CVE-2016-1386, upgrade to a patched version of Cisco Application Policy Infrastructure Controller Enterprise Module that addresses this vulnerability.
3
Who is affected by CVE-2016-1386?
CVE-2016-1386 affects users running Cisco Application Policy Infrastructure Controller Enterprise Module version 1.0(1).
4
What kind of attack does CVE-2016-1386 enable?
CVE-2016-1386 allows remote attackers to spoof administrative notifications via crafted attribute-value pairs.
5
When was CVE-2016-1386 disclosed?
CVE-2016-1386 was disclosed on April 28, 2016.