The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via unspecified vectors, aka Bug ID CSCuu83985.
http://www.securitytracker.com/id/1034468
http://www.securityfocus.com/bid/79410
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151216-apic