CVE-2019-1590

A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The vulnerability is due to insufficient TLS client certificate validations for certificates sent between the various components of an ACI fabric. An attacker who has possession of a certificate that is trusted by the Cisco Manufacturing CA and the corresponding private key could exploit this vulnerability by presenting a valid certificate while attempting to connect to the targeted device. An exploit could allow the attacker to gain full control of all other components within the ACI fabric of an affected device.

• CWE-295
• CWE-295

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabricVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabricVendor Advisory

Published

May 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15893Sonatype Nexus Repository Manager 2.x before 2.14.15 allows …7.2
• CVE-2019-15894An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x thro…6.8
• CVE-2019-15895search-exclude.php in the "Search Exclude" plugin before 1.2…7.5
• CVE-2019-15896An issue was discovered in the LifterLMS plugin through 3.34…9.8
• CVE-2019-15897beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authenti…9.6
• CVE-2019-15898Nagios Log Server before 2.0.8 allows Reflected XSS via the …
• CVE-2019-15900An issue was discovered in slicer69 doas before 6.2 on certa…9.8
• CVE-2019-15901An issue was discovered in slicer69 doas before 6.2 on certa…8.8
• CVE-2019-15902A backporting error was discovered in the Linux stable/longt…5.6
• CVE-2019-15903In libexpat before 2.2.8, crafted XML input could fool the p…7.5
• CVE-2019-1591A vulnerability in a specific CLI command implementation of …7.8
• CVE-2019-15910An issue was discovered on ASUS HG100, MW100, WS-101, TS-101…7.5