Test ID:	1.3.6.1.4.1.25623.1.0.807836
Category:	CISCO
Title:	Cisco APIC Enterprise Module Unauthorized Access Vulnerability (cisco-sa-20160428-apic)
Summary:	Cisco APIC Enterprise Module is prone to unauthorized access vulnerability.
Description:	Summary: Cisco APIC Enterprise Module is prone to unauthorized access vulnerability. Vulnerability Insight: The error exists due to insufficient protection of API functions, which does not handle modified attribute-value pairs. Vulnerability Impact: Successful exploitation will allow remote attackers to create false system notifications for administrators and trick the administrative users into performing a malicious task on behalf of the attacker. Affected Software/OS: Cisco APIC-EM version 1.0(1) is affected. Solution: Apply the updates from the referenced advisory. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1386 Cisco Security Advisory: 20160428 Cisco Application Policy Infrastructure Controller Enterprise Module Unauthorized Access Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic http://www.securitytracker.com/id/1035702
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.