cisco-sa-ndo-upav-YRqsCcSP: Cisco Nexus Dashboard Orchestrator Unauthorized Policy Actions Vulnerability
A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-ndo-upav-YRqsCcSP?
The severity of cisco-sa-ndo-upav-YRqsCcSP is rated as high due to the potential for unauthorized modification or deletion of tenant templates.
What could an attacker do with cisco-sa-ndo-upav-YRqsCcSP?
An attacker could exploit cisco-sa-ndo-upav-YRqsCcSP to modify or delete tenant templates on the affected Cisco Nexus Dashboard Orchestrator system.
How do I fix cisco-sa-ndo-upav-YRqsCcSP?
To fix cisco-sa-ndo-upav-YRqsCcSP, apply the security patches provided by Cisco for the affected version of Nexus Dashboard Orchestrator.
Who is affected by cisco-sa-ndo-upav-YRqsCcSP?
Organizations using Cisco Nexus Dashboard Orchestrator are affected by cisco-sa-ndo-upav-YRqsCcSP.
Is authentication required to exploit cisco-sa-ndo-upav-YRqsCcSP?
Yes, exploitation of cisco-sa-ndo-upav-YRqsCcSP requires authenticated access to the affected Cisco Nexus Dashboard Orchestrator system.