CVE-2015-6333 — Cisco Application Policy Infrastructure Controller vulnerability

CWE-2644 documents4 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 75.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Application Policy Infrastructure Controller
Timeline
PublishedOct 16
Latest updateMay 17

Description

Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-mwwc-9v58-7m9j: Cisco Application Policy Infrastructure Controller (APIC) 1↗2022-05-17
▶
CVEList
CVE-2015-6333: Cisco Application Policy Infrastructure Controller (APIC) 1↗2015-10-16
▶

📋Vendor Advisories

1
Cisco
Cisco Application Policy Infrastructure Controller Privilege Escalation SSH Key Vulnerability↗2015-10-13
▶
CVE-2015-6333 — Cisco vulnerability | cvebase