4.6
Medium
CVE-2019-1586 A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated,…
Description
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on local partitions in the hard drive of an affected device. An attacker could exploit this vulnerability by retrieving data from the physical disk on the affected partition(s). A successful exploit could allow the attacker to retrieve encryption keys, possibly allowing the attacker to further decrypt other data and sensitive information on the device, which could lead to the disclosure of confidential information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Application Policy Infrastructure Controller (APIC) | Versions not published |
References
- 20190501 Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability tools.cisco.com
- 108158 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Application Policy Infrastructure Controller (APIC)
The 30 CVEs of Cisco Application Policy Infrastructure Controller (APIC) →
CVE-2026-76500
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…
9.8
Critical
CVE-2026-76498
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…
9.8
Critical
CVE-2026-76499
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy…
9.8
Critical
CVE-2026-76488
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC)…
6.5
Medium