{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-20279", "ASSIGNER": "psirt@cisco.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) policies, on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete child policies created under default system policies, which are implicitly used by all tenants in the fabric, resulting in disruption of network traffic. Exploitation is not possible for policies under tenants that an attacker has no authorization to access." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Improper Access Control", "cweId": "CWE-284" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Cisco", "product": { "product_data": [ { "product_name": "Cisco Application Policy Infrastructure Controller (APIC)", "version": { "version_data": [ { "version_affected": "=", "version_value": "3.2(8d)" }, { "version_affected": "=", "version_value": "2.2(1o)" }, { "version_affected": "=", "version_value": "1.2(2h)" }, { "version_affected": "=", "version_value": "2.2(2i)" }, { "version_affected": "=", "version_value": "1.2(1k)" }, { "version_affected": "=", "version_value": "2.2(1k)" }, { "version_affected": "=", "version_value": "3.1(2m)" }, { "version_affected": "=", "version_value": "3.2(1m)" }, { "version_affected": "=", "version_value": "3.2(5e)" }, { "version_affected": "=", "version_value": "4.1(2m)" }, { "version_affected": "=", "version_value": "3.2(41d)" }, { "version_affected": "=", "version_value": "1.1(1o)" }, { "version_affected": "=", "version_value": "1.2(1m)" }, { "version_affected": "=", "version_value": "1.2(2j)" }, { "version_affected": "=", "version_value": "2.2(4r)" }, { "version_affected": "=", "version_value": "2.2(3j)" }, { "version_affected": "=", "version_value": "1.1(3f)" }, { "version_affected": "=", "version_value": "2.2(2f)" }, { "version_affected": "=", "version_value": "1.1(4m)" }, { "version_affected": "=", "version_value": "2.2(2k)" }, { "version_affected": "=", "version_value": "2.1(1i)" }, { "version_affected": "=", "version_value": "2.0(1p)" }, { "version_affected": "=", "version_value": "3.1(2p)" }, { "version_affected": "=", "version_value": "3.2(3s)" }, { "version_affected": "=", "version_value": "4.0(3c)" }, { "version_affected": "=", "version_value": "1.1(4e)" }, { "version_affected": "=", "version_value": "4.1(1k)" }, { "version_affected": "=", "version_value": "2.2(4f)" }, { "version_affected": "=", "version_value": "2.1(3h)" }, { "version_affected": "=", "version_value": "3.2(4d)" }, { "version_affected": "=", "version_value": "2.0(1n)" }, { "version_affected": "=", "version_value": "2.0(1m)" }, { "version_affected": "=", "version_value": "2.0(1r)" }, { "version_affected": "=", "version_value": "2.1(2e)" }, { "version_affected": "=", "version_value": "4.2(2e)" }, { "version_affected": "=", "version_value": "4.2(3j)" }, { "version_affected": "=", "version_value": "4.2(3n)" }, { "version_affected": "=", "version_value": "2.0(1l)" }, { "version_affected": "=", "version_value": "2.2(2e)" }, { "version_affected": "=", "version_value": "2.2(3r)" }, { "version_affected": "=", "version_value": "3.0(2k)" }, { "version_affected": "=", "version_value": "2.1(3g)" }, { "version_affected": "=", "version_value": "4.0(1h)" }, { "version_affected": "=", "version_value": "2.0(1o)" }, { "version_affected": "=", "version_value": "2.2(3p)" }, { "version_affected": "=", "version_value": "1.2(3e)" }, { "version_affected": "=", "version_value": "2.2(3s)" }, { "version_affected": "=", "version_value": "2.0(2g)" }, { "version_affected": "=", "version_value": "4.1(1l)" }, { "version_affected": "=", "version_value": "3.2(9f)" }, { "version_affected": "=", "version_value": "4.2(3l)" }, { "version_affected": "=", "version_value": "4.2(2g)" }, { "version_affected": "=", "version_value": "1.2(3c)" }, { "version_affected": "=", "version_value": "3.2(7k)" }, { "version_affected": "=", "version_value": "1.3(2h)" }, { "version_affected": "=", "version_value": "3.2(9b)" }, { "version_affected": "=", "version_value": "1.3(2k)" }, { "version_affected": "=", "version_value": "3.1(2t)" }, { "version_affected": "=", "version_value": "1.1(2h)" }, { "version_affected": "=", "version_value": "3.2(3j)" }, { "version_affected": "=", "version_value": "2.1(2k)" }, { "version_affected": "=", "version_value": "2.3(1f)" }, { "version_affected": "=", "version_value": "1.2(3h)" }, { "version_affected": "=", "version_value": "3.0(1i)" }, { "version_affected": "=", "version_value": "4.1(2u)" }, { "version_affected": "=", "version_value": "4.2(1l)" }, { "version_affected": "=", "version_value": "4.1(1a)" }, { "version_affected": "=", "version_value": "4.0(3d)" }, { "version_affected": "=", "version_value": "1.1(4l)" }, { "version_affected": "=", "version_value": "2.3(1i)" }, { "version_affected": "=", "version_value": "3.1(2q)" }, { "version_affected": "=", "version_value": "3.2(4e)" }, { "version_affected": "=", "version_value": "4.1(1i)" }, { "version_affected": "=", "version_value": "3.1(1i)" }, { "version_affected": "=", "version_value": "2.0(2m)" }, { "version_affected": "=", "version_value": "3.0(2h)" }, { "version_affected": "=", "version_value": "2.2(2q)" }, { "version_affected": "=", "version_value": "2.3(1l)" }, { "version_affected": "=", "version_value": "1.3(1h)" }, { "version_affected": "=", "version_value": "3.0(2n)" }, { "version_affected": "=", "version_value": "3.2(5f)" }, { "version_affected": "=", "version_value": "1.2(1h)" }, { "version_affected": "=", "version_value": "3.2(1l)" }, { "version_affected": "=", "version_value": "4.2(1i)" }, { "version_affected": "=", "version_value": "4.1(2o)" }, { "version_affected": "=", "version_value": "1.2(1i)" }, { "version_affected": "=", "version_value": "1.3(1j)" }, { "version_affected": "=", "version_value": "2.1(1h)" }, { "version_affected": "=", "version_value": "2.0(2l)" }, { "version_affected": "=", "version_value": "2.0(2h)" }, { "version_affected": "=", "version_value": "1.2(2g)" }, { "version_affected": "=", "version_value": "3.0(1k)" }, { "version_affected": "=", "version_value": "4.2(1g)" }, { "version_affected": "=", "version_value": "2.1(2g)" }, { "version_affected": "=", "version_value": "2.0(1q)" }, { "version_affected": "=", "version_value": "1.1(1j)" }, { "version_affected": "=", "version_value": "4.1(2g)" }, { "version_affected": "=", "version_value": "1.1(1r)" }, { "version_affected": "=", "version_value": "4.2(2f)" }, { "version_affected": "=", "version_value": "3.2(6i)" }, { "version_affected": "=", "version_value": "1.3(1g)" }, { "version_affected": "=", "version_value": "1.3(2j)" }, { "version_affected": "=", "version_value": "1.3(2i)" }, { "version_affected": "=", "version_value": "2.0(2o)" }, { "version_affected": "=", "version_value": "2.2(4q)" }, { "version_affected": "=", "version_value": "2.3(1o)" }, { "version_affected": "=", "version_value": "3.2(3i)" }, { "version_affected": "=", "version_value": "2.2(2j)" }, { "version_affected": "=", "version_value": "1.1(1d)" }, { "version_affected": "=", "version_value": "2.0(2n)" }, { "version_affected": "=", "version_value": "2.2(3t)" }, { "version_affected": "=", "version_value": "3.2(3n)" }, { "version_affected": "=", "version_value": "1.1(4g)" }, { "version_affected": "=", "version_value": "4.1(2x)" }, { "version_affected": "=", "version_value": "3.2(5d)" }, { "version_affected": "=", "version_value": "3.1(2o)" }, { "version_affected": "=", "version_value": "1.2(2i)" }, { "version_affected": "=", "version_value": "2.1(2f)" }, { "version_affected": "=", "version_value": "1.3(2f)" }, { "version_affected": "=", "version_value": "4.2(3q)" }, { "version_affected": "=", "version_value": "4.1(1j)" }, { "version_affected": "=", "version_value": "2.0(2f)" }, { "version_affected": "=", "version_value": "2.3(1e)" }, { "version_affected": "=", "version_value": "1.1(1s)" }, { "version_affected": "=", "version_value": "3.1(2v)" }, { "version_affected": "=", "version_value": "4.1(2w)" }, { "version_affected": "=", "version_value": "1.1(4i)" }, { "version_affected": "=", "version_value": "3.1(2u)" }, { "version_affected": "=", "version_value": "1.1(4f)" }, { "version_affected": "=", "version_value": "3.0(2m)" }, { "version_affected": "=", "version_value": "2.0(1k)" }, { "version_affected": "=", "version_value": "3.2(2o)" }, { "version_affected": "=", "version_value": "3.2(3r)" }, { "version_affected": "=", "version_value": "1.1(2i)" }, { "version_affected": "=", "version_value": "4.0(2c)" }, { "version_affected": "=", "version_value": "1.3(1i)" }, { "version_affected": "=", "version_value": "4.1(2s)" }, { "version_affected": "=", "version_value": "3.2(7f)" }, { "version_affected": "=", "version_value": "1.2(3m)" }, { "version_affected": "=", "version_value": "3.2(3o)" }, { "version_affected": "=", "version_value": "3.1(2s)" }, { "version_affected": "=", "version_value": "3.2(2l)" }, { "version_affected": "=", "version_value": "4.2(1j)" }, { "version_affected": "=", "version_value": "2.3(1p)" }, { "version_affected": "=", "version_value": "2.1(4a)" }, { "version_affected": "=", "version_value": "1.1(1n)" }, { "version_affected": "=", "version_value": "2.2(1n)" }, { "version_affected": "=", "version_value": "2.2(4p)" }, { "version_affected": "=", "version_value": "2.1(3j)" }, { "version_affected": "=", "version_value": "4.2(4i)" }, { "version_affected": "=", "version_value": "3.2(9h)" }, { "version_affected": "=", "version_value": "5.0(1k)" }, { "version_affected": "=", "version_value": "4.2(4k)" }, { "version_affected": "=", "version_value": "5.0(1l)" }, { "version_affected": "=", "version_value": "5.0(2e)" }, { "version_affected": "=", "version_value": "4.2(4o)" }, { "version_affected": "=", "version_value": "4.2(4p)" }, { "version_affected": "=", "version_value": "5.0(2h)" }, { "version_affected": "=", "version_value": "4.2(5k)" }, { "version_affected": "=", "version_value": "4.2(5l)" }, { "version_affected": "=", "version_value": "4.2(5n)" }, { "version_affected": "=", "version_value": "5.1(1h)" }, { "version_affected": "=", "version_value": "4.2(6d)" }, { "version_affected": "=", "version_value": "5.1(2e)" }, { "version_affected": "=", "version_value": "4.2(6g)" }, { "version_affected": "=", "version_value": "4.2(6h)" }, { "version_affected": "=", "version_value": "5.1(3e)" }, { "version_affected": "=", "version_value": "3.2(10e)" }, { "version_affected": "=", "version_value": "4.2(6l)" }, { "version_affected": "=", "version_value": "4.2(7f)" }, { "version_affected": "=", "version_value": "5.1(4c)" }, { "version_affected": "=", "version_value": "4.2(6o)" }, { "version_affected": "=", "version_value": "5.2(1g)" }, { "version_affected": "=", "version_value": "5.2(2e)" }, { "version_affected": "=", "version_value": "4.2(7l)" }, { "version_affected": "=", "version_value": "3.2(10f)" }, { "version_affected": "=", "version_value": "5.2(2f)" }, { "version_affected": "=", "version_value": "5.2(2g)" }, { "version_affected": "=", "version_value": "4.2(7q)" }, { "version_affected": "=", "version_value": "5.2(2h)" }, { "version_affected": "=", "version_value": "5.2(3f)" }, { "version_affected": "=", "version_value": "5.2(3e)" }, { "version_affected": "=", "version_value": "5.2(3g)" }, { "version_affected": "=", "version_value": "4.2(7r)" }, { "version_affected": "=", "version_value": "4.2(7s)" }, { "version_affected": "=", "version_value": "5.2(4d)" }, { "version_affected": "=", "version_value": "5.2(4e)" }, { "version_affected": "=", "version_value": "4.2(7t)" }, { "version_affected": "=", "version_value": "5.2(5d)" }, { "version_affected": "=", "version_value": "3.2(10g)" }, { "version_affected": "=", "version_value": "5.2(5c)" }, { "version_affected": "=", "version_value": "6.0(1g)" }, { "version_affected": "=", "version_value": "4.2(7u)" }, { "version_affected": "=", "version_value": "5.2(5e)" }, { "version_affected": "=", "version_value": "5.2(4f)" }, { "version_affected": "=", "version_value": "5.2(6e)" }, { "version_affected": "=", "version_value": "6.0(1j)" }, { "version_affected": "=", "version_value": "5.2(6g)" }, { "version_affected": "=", "version_value": "5.2(7f)" }, { "version_affected": "=", "version_value": "4.2(7v)" }, { "version_affected": "=", "version_value": "5.2(7g)" }, { "version_affected": "=", "version_value": "6.0(2h)" }, { "version_affected": "=", "version_value": "4.2(7w)" }, { "version_affected": "=", "version_value": "5.2(6h)" }, { "version_affected": "=", "version_value": "5.2(4h)" }, { "version_affected": "=", "version_value": "5.2(8d)" }, { "version_affected": "=", "version_value": "6.0(2j)" }, { "version_affected": "=", "version_value": "5.2(8e)" }, { "version_affected": "=", "version_value": "6.0(3d)" }, { "version_affected": "=", "version_value": "6.0(3e)" }, { "version_affected": "=", "version_value": "5.2(8f)" }, { "version_affected": "=", "version_value": "5.2(8g)" }, { "version_affected": "=", "version_value": "5.3(1d)" }, { "version_affected": "=", "version_value": "5.2(8h)" }, { "version_affected": "=", "version_value": "6.0(4c)" }, { "version_affected": "=", "version_value": "5.3(2a)" }, { "version_affected": "=", "version_value": "5.2(8i)" }, { "version_affected": "=", "version_value": "6.0(5h)" }, { "version_affected": "=", "version_value": "5.3(2b)" }, { "version_affected": "=", "version_value": "6.0(3g)" }, { "version_affected": "=", "version_value": "6.0(5j)" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-cousmo-uBpBYGbq", "refsource": "MISC", "name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-cousmo-uBpBYGbq" } ] }, "source": { "advisory": "cisco-sa-apic-cousmo-uBpBYGbq", "discovery": "INTERNAL", "defects": [ "CSCwe67288" ] }, "exploit": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory." } ], "impact": { "cvss": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } ] } }