mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 17:51:17 +00:00
247 lines
8.7 KiB
JSON
247 lines
8.7 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2016-1302",
|
||
|
|
"sourceIdentifier": "ykramarz@cisco.com",
|
||
|
|
"published": "2016-02-07T11:59:01.943",
|
||
|
|
"lastModified": "2016-12-06T03:06:36.620",
|
||
|
|
"vulnStatus": "Modified",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "Dispositivos Cisco Application Policy Infrastructure Controller (APIC) con software anterior a 1.0(3h) y 1.1 en versiones anteriores a 1.1(1j) y switches Nexus 9000 ACI Mode con software anterior a 11.0(3h) y 11.1 en versiones anteriores a 11.1(1j) permite a usuarios remotos autenticados eludir las restricciones destinadas RBAC a trav\u00e9s de peticiones REST manipuladas, tambi\u00e9n conocido como Bug ID CSCut12998."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV30": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.0",
|
||
|
|
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||
|
|
"attackVector": "NETWORK",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "LOW",
|
||
|
|
"userInteraction": "NONE",
|
||
|
|
"scope": "UNCHANGED",
|
||
|
|
"confidentialityImpact": "HIGH",
|
||
|
|
"integrityImpact": "HIGH",
|
||
|
|
"availabilityImpact": "HIGH",
|
||
|
|
"baseScore": 8.8,
|
||
|
|
"baseSeverity": "HIGH"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 2.8,
|
||
|
|
"impactScore": 5.9
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
|
||
|
|
"accessVector": "NETWORK",
|
||
|
|
"accessComplexity": "LOW",
|
||
|
|
"authentication": "SINGLE",
|
||
|
|
"confidentialityImpact": "COMPLETE",
|
||
|
|
"integrityImpact": "COMPLETE",
|
||
|
|
"availabilityImpact": "COMPLETE",
|
||
|
|
"baseScore": 9.0
|
||
|
|
},
|
||
|
|
"baseSeverity": "HIGH",
|
||
|
|
"exploitabilityScore": 8.0,
|
||
|
|
"impactScore": 10.0,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-284"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"operator": "AND",
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "3A5867B4-EC19-45D4-87BE-867E1D41ECD5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndExcluding": "2.50\\(aazi.0\\)c0",
|
||
|
|
"matchCriteriaId": "21D9999F-C55E-4BAB-A401-007FB34B2A5E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*",
|
||
|
|
"matchCriteriaId": "83223AC7-22F3-4FCA-B11B-B769086DCF04"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"operator": "AND",
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "4283E433-7F8C-4410-B565-471415445811"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "11411BFD-3F4D-4309-AB35-A3629A360FB0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "F70D81F1-8B12-4474-9060-B4934D8A3873"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "113772B6-E9D2-4094-9468-3F4E1A87D07D"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "4364ADB9-8162-451D-806A-B98924E6B2CF"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "49E0371B-FDE2-473C-AA59-47E1269D050F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EA022E77-6557-4A33-9A3A-D028E2DB669A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "768BE390-5ED5-48A7-9E80-C4DE8BA979B1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": false,
|
||
|
|
"criteria": "cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "7E02DC82-0D26-436F-BA64-73C958932B0A"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:cisco:nx-os:base:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "CFBAD221-BBD3-4BE6-974F-361C8E0FC6E2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndExcluding": "2.50\\(aazi.0\\)c0",
|
||
|
|
"matchCriteriaId": "21D9999F-C55E-4BAB-A401-007FB34B2A5E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*",
|
||
|
|
"matchCriteriaId": "83223AC7-22F3-4FCA-B11B-B769086DCF04"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-apic",
|
||
|
|
"source": "ykramarz@cisco.com",
|
||
|
|
"tags": [
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securitytracker.com/id/1034925",
|
||
|
|
"source": "ykramarz@cisco.com"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|