CVE-2024-20279
MEDIUMDescription
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) policies, on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete child policies created under default system policies, which are implicitly used by all tenants in the fabric, resulting in disruption of network traffic. Exploitation is not possible for policies under tenants that an attacker has no authorization to access.
Is your site exposed to CVE-2024-20279?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness Type (CWE)
CWE-284
CWE-284
Affected Products
| Vendor | Product |
|---|---|
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
| cisco | application_policy_infrastructure_controller |
References
Frequently Asked Questions
What is CVE-2024-20279? +
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service (QoS) policies, on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete child policies created under default system policies, which are implicitly used by all tenants in the fabric, resulting in disruption of network traffic. Exploitation is not possible for policies under tenants that an attacker has no authorization to access. It has a CVSS v3.1 base score of 4.3 (MEDIUM).
How severe is CVE-2024-20279? +
CVE-2024-20279 has a CVSS v3.1 score of 4.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-20279? +
CVE-2024-20279 affects products from cisco, specifically: application_policy_infrastructure_controller. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-20279? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2026-35402
mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode …
CVE-2026-40866
Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in …
CVE-2026-40865
Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in …
CVE-2026-40874
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes …
CVE-2026-54533
vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms …
CVE-2026-48907
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately …