CVE:CVE-2019-1585
CNNVD:CNNVD-201903-167
Cisco Nexus 9000 Series ACI Mode Switch Software（处于ACI模式）中的NX-OS Software的controller authorization功能存在配置错误漏洞，该漏洞源于程序为bashroot组件错误地配置了sudoers文件。本地攻击者可借助特制的用户ID对受影响设备进行身份验证利用该漏洞提升权限。
solution:Upgrade cisco nx-os to a higher version than 8.3(0sk(0.39,and avoid the version 8.3(0)sk(0.39); Upgrade cisco application_policy_infrastructure_controller_software to a higher version than 4.0\(1h\,and avoid the version (,4.0\(1h\)]