Cisco Application Policy Infrastructure Controller Local Privilege Escalation Vulnerability

Bugtraq ID:	100363
Class:	Design Error
CVE:	CVE-2017-6768
Remote:	No
Local:	Yes
Published:	Aug 16 2017 12:00AM
Updated:	Aug 16 2017 12:00AM
Credit:	Mgr. Lubomir Vesely.
Vulnerable:	Cisco Application Policy Infrastructure Controller (APIC) 2.0(2f)
Not Vulnerable:

Cisco Application Policy Infrastructure Controller Local Privilege Escalation Vulnerability

Cisco Application Policy Infrastructure Controller is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to gain root privileges on the affected system.

This issue is being tracked by Cisco Bug ID CSCvc96087.

Cisco Application Policy Infrastructure Controller Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Application Policy Infrastructure Controller Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Application Policy Infrastructure Controller Local Privilege Escalation Vulnerability

References:

• Cisco Homepage (Cisco )
  
• cisco-sa-20170816-apic2:Cisco Application Policy Infrastructure Controller Custo (Cisco)