CVE-2019-1692

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certain components in the underlying Application Centric Infrastructure (ACI). An attacker could exploit this vulnerability by attempting to observe certain network traffic when accessing the APIC. A successful exploit could allow the attacker to access and collect certain tracking data and usage statistics on an affected device.

• CWE-200
• CWE-311

• http://www.securityfocus.com/bid/108155Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-info-discVendor Advisory
• http://www.securityfocus.com/bid/108155Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-info-discVendor Advisory

Published

May 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16913PC Protect Antivirus v4.14.31 installs by default to %PROGRA…7.8
• CVE-2019-16914An XSS issue was discovered in pfSense through 2.4.4-p3. In …6.1
• CVE-2019-16915An issue was discovered in pfSense through 2.4.4-p3. widgets…9.8
• CVE-2019-16916Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-16917WiKID Enterprise 2FA (two factor authentication) Enterprise …8.8
• CVE-2019-16919Harbor API has a Broken Access Control vulnerability. The vu…7.5
• CVE-2019-16920Unauthenticated remote code execution occurs in D-Link produ…9.8
• CVE-2019-16921In the Linux kernel before 4.17, hns_roce_alloc_ucontext in …7.5
• CVE-2019-16922SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allo…5.3
• CVE-2019-16923kkcms 1.3 has jx.php?url= XSS.6.1
• CVE-2019-16924The Nulock application 1.5.0 for mobile devices sends a clea…8.8
• CVE-2019-16925Flower 0.9.3 has XSS via the name parameter in an @app.task …6.1