Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers files for the bashroot component on an affected device. An attacker could exploit this vulnerability by authenticating to the affected device with a crafted user ID, which may allow temporary administrative access to escalate privileges. A successful exploit could allow the attacker to escalate privileges on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsec ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsec"]
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-1585US | high7.8 | — | ||
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Nexus 1000V for VMware Switchexternal
- Cisco Nexus 3000 Series and 3500 Series Switchesexternal
- Cisco Nexus 5000 Series Switchesexternal
- Cisco Nexus 5500 Platform Switchesexternal
- Cisco Nexus 6000 Series Switchesexternal
- Cisco Nexus 9000 Series Switchesexternal
- Cisco Nexus 7000 Series Switchesexternal
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsecexternal
Behebungen (91)
- Kein Fix verfügbar11.0(1b)
No remediation is available at this time.
- Kein Fix verfügbar11.0(1c)
No remediation is available at this time.
- Kein Fix verfügbar11.0(1d)
No remediation is available at this time.
- Kein Fix verfügbar11.0(1e)
No remediation is available at this time.
- Kein Fix verfügbar11.0(2j)
No remediation is available at this time.
- Kein Fix verfügbar11.0(2m)
No remediation is available at this time.
- Kein Fix verfügbar11.0(3f)
No remediation is available at this time.
- Kein Fix verfügbar11.0(3i)
No remediation is available at this time.
- Kein Fix verfügbar11.0(3k)
No remediation is available at this time.
- Kein Fix verfügbar11.0(3n)
No remediation is available at this time.
- Kein Fix verfügbar11.0(3o)
No remediation is available at this time.
- Kein Fix verfügbar11.0(4h)
No remediation is available at this time.
- Kein Fix verfügbar11.0(4o)
No remediation is available at this time.
- Kein Fix verfügbar11.0(4q)
No remediation is available at this time.
- Kein Fix verfügbar11.1(1j)
No remediation is available at this time.
- Kein Fix verfügbar11.1(1o)
No remediation is available at this time.
- Kein Fix verfügbar11.1(1r)
No remediation is available at this time.
- Kein Fix verfügbar11.1(1s)
No remediation is available at this time.
- Kein Fix verfügbar11.1(2h)
No remediation is available at this time.
- Kein Fix verfügbar11.1(2i)
No remediation is available at this time.
- Kein Fix verfügbar11.1(3f)
No remediation is available at this time.
- Kein Fix verfügbar11.1(4e)
No remediation is available at this time.
- Kein Fix verfügbar11.2(1i)
No remediation is available at this time.
- Kein Fix verfügbar11.2(2g)
No remediation is available at this time.
- Kein Fix verfügbar11.2(2h)
No remediation is available at this time.
- Kein Fix verfügbar11.2(2i)
No remediation is available at this time.
- Kein Fix verfügbar11.2(3c)
No remediation is available at this time.
- Kein Fix verfügbar11.2(3e)
No remediation is available at this time.
- Kein Fix verfügbar11.2(3h)
No remediation is available at this time.
- Kein Fix verfügbar11.2(3m)
No remediation is available at this time.
- Kein Fix verfügbar11.3(1g)
No remediation is available at this time.
- Kein Fix verfügbar11.3(1h)
No remediation is available at this time.
- Kein Fix verfügbar11.3(1i)
No remediation is available at this time.
- Kein Fix verfügbar11.3(2f)
No remediation is available at this time.
- Kein Fix verfügbar11.3(2h)
No remediation is available at this time.
- Kein Fix verfügbar11.3(2i)
No remediation is available at this time.
- Kein Fix verfügbar11.3(2k)
No remediation is available at this time.
- Kein Fix verfügbar12.0(1m)
No remediation is available at this time.
- Kein Fix verfügbar12.0(1n)
No remediation is available at this time.
- Kein Fix verfügbar12.0(1o)
No remediation is available at this time.
- Kein Fix verfügbar12.0(1p)
No remediation is available at this time.
- Kein Fix verfügbar12.0(1q)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2f)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2g)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2h)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2l)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2m)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2n)
No remediation is available at this time.
- Kein Fix verfügbar12.0(2o)
No remediation is available at this time.
- Kein Fix verfügbar12.1(1h)
No remediation is available at this time.
- Kein Fix verfügbar12.1(1i)
No remediation is available at this time.
- Kein Fix verfügbar12.1(2e)
No remediation is available at this time.
- Kein Fix verfügbar12.1(2g)
No remediation is available at this time.
- Kein Fix verfügbar12.1(2k)
No remediation is available at this time.
- Kein Fix verfügbar12.1(3g)
No remediation is available at this time.
- Kein Fix verfügbar12.1(3h)
No remediation is available at this time.
- Kein Fix verfügbar12.1(3j)
No remediation is available at this time.
- Kein Fix verfügbar12.1(4a)
No remediation is available at this time.
- Kein Fix verfügbar12.2(1n)
No remediation is available at this time.
- Kein Fix verfügbar12.2(1o)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2e)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2f)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2g)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2i)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2j)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2k)
No remediation is available at this time.
- Kein Fix verfügbar12.2(2q)
No remediation is available at this time.
- Kein Fix verfügbar12.2(3j)
No remediation is available at this time.
- Kein Fix verfügbar12.2(3p)
No remediation is available at this time.
- Kein Fix verfügbar12.2(3r)
No remediation is available at this time.
- Kein Fix verfügbar12.2(3s)
No remediation is available at this time.
- Kein Fix verfügbar12.2(3t)
No remediation is available at this time.
- Kein Fix verfügbar12.2(4f)
No remediation is available at this time.
- Kein Fix verfügbar12.2(4p)
No remediation is available at this time.
- Kein Fix verfügbar12.3(1e)
No remediation is available at this time.
- Kein Fix verfügbar12.3(1f)
No remediation is available at this time.
- Kein Fix verfügbar12.3(1i)
No remediation is available at this time.
- Kein Fix verfügbar12.3(1l)
No remediation is available at this time.
- Kein Fix verfügbar12.3(1o)
No remediation is available at this time.
- Kein Fix verfügbar12.3(1p)
No remediation is available at this time.
- Kein Fix verfügbar13.0(1k)
No remediation is available at this time.
- Kein Fix verfügbar13.0(2h)
No remediation is available at this time.
- Kein Fix verfügbar13.0(2k)
No remediation is available at this time.
- Kein Fix verfügbar13.0(2n)
No remediation is available at this time.
- Kein Fix verfügbar13.1(1i)
No remediation is available at this time.
- Kein Fix verfügbar13.1(2m)
No remediation is available at this time.
- Kein Fix verfügbar13.1(2o)
No remediation is available at this time.
- Kein Fix verfügbar13.1(2p)
No remediation is available at this time.
- Kein Fix verfügbar13.1(2q)
No remediation is available at this time.
- Kein Fix verfügbar13.2(1l)
No remediation is available at this time.
- Kein Fix verfügbar13.2(1m)
No remediation is available at this time.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan