Cisco APIC Authenticated Information Disclosure Vulnerability

A vulnerability exists in Cisco Application Policy Infrastructure Controller (APIC) that allows an authenticated, local attacker to access sensitive information on an affected device. This issue arises from inadequate masking of sensitive data displayed through system CLI commands. Exploitation of this vulnerability could enable the attacker to gather information that may be used for further attacks.

Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive information on the affected device, potentially facilitating additional attacks.

Remediation

Cisco has released software updates to address this vulnerability. For specific upgrade instructions, consult the Cisco Security Advisories page or contact the Cisco Technical Assistance Center (TAC) or your maintenance provider.