QID 317347

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to read, modify, or delete non-tenant policies (for example, access policies) created by users associated with a different security domain on an affected system.

Affected Products:
Cisco APIC Release 5.2 prior to 5.2(8d)
Cisco APIC Release 6.0 prior to 6.0(3d)

QID Detection Logic(Authenticated):
The check matches Cisco APIC version retrieved via Unix Auth using "show version" command.
Note: This QID does not checks for the restricted security domain configuration, Hence set as a Practice

A successful exploit could allow the attacker to read, modify, or delete policies created by users associated with a different security domain.