CVE:CVE-2023-20011
CNNVD:CNNVD-202302-1937
Cisco Application Policy Infrastructure Controller（APIC）是美国思科（Cisco）公司的一款自动化的基础架构部署和治理解决方案。
Cisco Application Policy Infrastructure Controller (APIC)、Cisco Cloud Network Controller存在安全漏洞，该漏洞源于基于Web的管理界面没有进行充分的跨站请求伪造检查。攻击者利用该漏洞升级权限并执行任意操作。
solution:Upgrade cisco application_policy_infrastructure_controller to a higher version than 5.2\(7g\,6.0\(2h\,and avoid the version [4.2\(6\),5.2\(7g\)),[6.0,6.0\(2h\)); Upgrade cisco cloud_network_controller to a higher version than 25.0\(5\,and avoid the version [4.2\(6\),25.0\(5\))