CVE:CVE-2020-3333
CNNVD:CNNVD-202006-338
Cisco Application Services Engine是美国思科（Cisco）公司的一套用于部署Cisco数据中心应用的通用平台。
Cisco Application Services Engine 1.1.2.20之前版本中的API存在访问控制错误漏洞，该漏洞源于不充分的身份验证。远程攻击者可通过发送恶意的HTTP请求利用该漏洞更新事件策略。
solution:Upgrade cisco application_policy_infrastructure_controller to a higher version than 1.1(0c,and avoid the version 1.1(0c); Upgrade cisco application_services_engine to a higher version than 1.1.2.20,and avoid the version (,1.1.2.20)