A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks.
The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_policy_infrastructure_controller | Cisco | 3.2(1l) (including) | 3.2(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(1m) (including) | 3.2(1m) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(2l) (including) | 3.2(2l) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(2o) (including) | 3.2(2o) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3i) (including) | 3.2(3i) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3j) (including) | 3.2(3j) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3n) (including) | 3.2(3n) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3o) (including) | 3.2(3o) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3r) (including) | 3.2(3r) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(3s) (including) | 3.2(3s) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(4d) (including) | 3.2(4d) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(4e) (including) | 3.2(4e) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(5d) (including) | 3.2(5d) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(5e) (including) | 3.2(5e) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(5f) (including) | 3.2(5f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(6i) (including) | 3.2(6i) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(7f) (including) | 3.2(7f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(7k) (including) | 3.2(7k) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(8d) (including) | 3.2(8d) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(9b) (including) | 3.2(9b) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(9f) (including) | 3.2(9f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(9h) (including) | 3.2(9h) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(10e) (including) | 3.2(10e) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(10f) (including) | 3.2(10f) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(10g) (including) | 3.2(10g) (including) |
| Application_policy_infrastructure_controller | Cisco | 3.2(41d) (including) | 3.2(41d) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(1h) (including) | 4.0(1h) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(2c) (including) | 4.0(2c) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(3c) (including) | 4.0(3c) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.0(3d) (including) | 4.0(3d) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1a) (including) | 4.1(1a) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1i) (including) | 4.1(1i) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1j) (including) | 4.1(1j) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1k) (including) | 4.1(1k) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(1l) (including) | 4.1(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2g) (including) | 4.1(2g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2m) (including) | 4.1(2m) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2o) (including) | 4.1(2o) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2s) (including) | 4.1(2s) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2u) (including) | 4.1(2u) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2w) (including) | 4.1(2w) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.1(2x) (including) | 4.1(2x) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1g) (including) | 4.2(1g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1i) (including) | 4.2(1i) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1j) (including) | 4.2(1j) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(1l) (including) | 4.2(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(2e) (including) | 4.2(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(2f) (including) | 4.2(2f) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(2g) (including) | 4.2(2g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3j) (including) | 4.2(3j) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3l) (including) | 4.2(3l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3n) (including) | 4.2(3n) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(3q) (including) | 4.2(3q) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4i) (including) | 4.2(4i) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4k) (including) | 4.2(4k) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4o) (including) | 4.2(4o) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(4p) (including) | 4.2(4p) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(5k) (including) | 4.2(5k) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(5l) (including) | 4.2(5l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(5n) (including) | 4.2(5n) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6d) (including) | 4.2(6d) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6g) (including) | 4.2(6g) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6h) (including) | 4.2(6h) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6l) (including) | 4.2(6l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(6o) (including) | 4.2(6o) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7f) (including) | 4.2(7f) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7l) (including) | 4.2(7l) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7q) (including) | 4.2(7q) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7r) (including) | 4.2(7r) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7s) (including) | 4.2(7s) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7t) (including) | 4.2(7t) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7u) (including) | 4.2(7u) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7v) (including) | 4.2(7v) (including) |
| Application_policy_infrastructure_controller | Cisco | 4.2(7w) (including) | 4.2(7w) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(1k) (including) | 5.0(1k) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(1l) (including) | 5.0(1l) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(2e) (including) | 5.0(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.0(2h) (including) | 5.0(2h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(1h) (including) | 5.1(1h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(2e) (including) | 5.1(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(3e) (including) | 5.1(3e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.1(4c) (including) | 5.1(4c) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(1g) (including) | 5.2(1g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2e) (including) | 5.2(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2f) (including) | 5.2(2f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2g) (including) | 5.2(2g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(2h) (including) | 5.2(2h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(3e) (including) | 5.2(3e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(3f) (including) | 5.2(3f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(3g) (including) | 5.2(3g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4d) (including) | 5.2(4d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4e) (including) | 5.2(4e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4f) (including) | 5.2(4f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(4h) (including) | 5.2(4h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(5c) (including) | 5.2(5c) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(5d) (including) | 5.2(5d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(5e) (including) | 5.2(5e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(6e) (including) | 5.2(6e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(6g) (including) | 5.2(6g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(6h) (including) | 5.2(6h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(7f) (including) | 5.2(7f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(7g) (including) | 5.2(7g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8d) (including) | 5.2(8d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8e) (including) | 5.2(8e) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8f) (including) | 5.2(8f) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8g) (including) | 5.2(8g) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8h) (including) | 5.2(8h) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.2(8i) (including) | 5.2(8i) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(1d) (including) | 5.3(1d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2a) (including) | 5.3(2a) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2b) (including) | 5.3(2b) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2c) (including) | 5.3(2c) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2d) (including) | 5.3(2d) (including) |
| Application_policy_infrastructure_controller | Cisco | 5.3(2e) (including) | 5.3(2e) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(1g) (including) | 6.0(1g) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(1j) (including) | 6.0(1j) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(2h) (including) | 6.0(2h) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(2j) (including) | 6.0(2j) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(3d) (including) | 6.0(3d) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(3e) (including) | 6.0(3e) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(3g) (including) | 6.0(3g) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(4c) (including) | 6.0(4c) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(5h) (including) | 6.0(5h) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(5j) (including) | 6.0(5j) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(6c) (including) | 6.0(6c) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(7e) (including) | 6.0(7e) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.0(8d) (including) | 6.0(8d) (including) |
| Application_policy_infrastructure_controller | Cisco | 6.1(1f) (including) | 6.1(1f) (including) |
Resources that may contain sensitive data include documents, packets, messages, databases, etc. While this data may be useful to an individual user or small set of users who share the resource, it may need to be removed before the resource can be shared outside of the trusted group. The process of removal is sometimes called cleansing or scrubbing. For example, a product for editing documents might not remove sensitive data such as reviewer comments or the local pathname where the document is stored. Or, a proxy might not remove an internal IP address from headers before making an outgoing request to an Internet site.