Cisco Aci 6.0 Release Notes

Cisco ACI 6.0 Release Notes

New Features and Enhancements

Cisco ACI 6.0 introduces the following new features and enhancements:

• Application Centric Infrastructure (ACI) Multi-Site Orchestration: ACI Multi-Site Orchestration simplifies and automates the deployment, configuration, and management of multi-site ACI deployments.

• Cisco ACI Anywhere: ACI Anywhere provides the ability to deploy ACI fabrics across data centers, campuses, and cloud environments while maintaining a single point of policy and management.

• Support for AVX-512 Instructions: AVX-512 instructions are now supported on the Cisco Nexus 9300-EX and 9300-FX platforms. AVX-512 instructions can improve performance for compute-intensive workloads such as data analytics, machine learning, and video processing.

Bug Fixes

• CSCvb63617 – The ACI fabric may experience a complete outage if certain unsupported line cards are present in the system.

• CSCvb65929 – The APIC may become unresponsive when attempting to delete a VRF that has a large number of endpoints.

• CSCvb68302 – The APIC may become unresponsive when attempting to modify the VRF of an endpoint group.

• CSCvb68699 – APICs in an HA configuration may fail to elect a leader if the cluster is rebooted while the APICs are in the process of upgrading.

• CSCvb69159 – The APIC may become unresponsive when attempting to modify the bandwidth of an EPG.

Security Vulnerabilities Resolved

• CVE-2018-0296 – A vulnerability in the REST API interface of the Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system.

• CVE-2018-0311 – A vulnerability in the web-based user interface (Web UI) of the Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Web UI.

• CVE-2018-0312 – A vulnerability in the web-based user interface (Web UI) of the Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the Web UI.

• CVE-2018-0313 – A vulnerability in the web-based user interface (Web UI) of the Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the Web UI.

• CVE-2018-0314 – A vulnerability in the web-based user interface (Web UI) of the Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the Web UI.