CVE-2015-4231 Missing authorization in n/a
Local administrators in one VDC can bypass restrictions to delete files in another VDC on Cisco Nexus devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-4231?
CVE-2015-4231 is a low-severity missing authorization vulnerability in Cisco Nx-Os, published on 3 Jul 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416.
Weakness: CWE-264
Which versions are affected by CVE-2015-4231?
It affects 1 product.
Products include Cisco Nx-Os.
How do I fix CVE-2015-4231?
No fix has been published for CVE-2015-4231 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2015-4231 being exploited?
There is no known exploitation of CVE-2015-4231 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nx-Os
Sources
Also known as GHSA-pmh9-frrx-c2qm.