CVE-2021-1579: Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system. This vulnerability is due to an insufficient role-based access control (RBAC). An attacker with Administrator read-only credentials could exploit this vulnerability by sending a specific API request using an app with admin write credentials. A successful exploit could allow the attacker to elevate privileges to Administrator with write privileges on the affected device.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-1579?
CVE-2021-1579 is a vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) that allows an attacker to elevate privileges on an affected system.
How severe is CVE-2021-1579?
CVE-2021-1579 has a severity rating of 8.8, which is considered critical.
Which software is affected by CVE-2021-1579?
Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) versions up to 3.2(10f), 4.0 to 4.2(7l), and 5.0 to 5.2(2f) are affected by CVE-2021-1579.
How can an attacker exploit CVE-2021-1579?
An attacker with Administrator read-only credentials can exploit CVE-2021-1579 by using an API endpoint to elevate their privileges on the affected system.
Where can I find more information about CVE-2021-1579?
You can find more information about CVE-2021-1579 in the Cisco Security Advisory: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-chvul-CKfGYBh8