CVE-2013-3473

2022-10-0316:14:46

CWE-287

[email protected]

web.nvd.nist.gov

cisco

prime central

hosted collaboration solution

hcs

assurance

cve-2013-3473

nvd

bug id cscud32600

web framework

security vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.1%

JSON

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.

Affected configurations

NVD

Node

ciscoprime_central_for_hosted_collaboration_solution_assuranceRange≤9.1

ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch1.0

ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch1.0.1

ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch8.6

ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch9.0

CPENameOperatorVersion
cisco:prime_central_for_hosted_collaboration_solution_assurancecisco prime central for hosted collaboration solution assurancele9.1
cisco:prime_central_for_hosted_collaboration_solution_assurancecisco prime central for hosted collaboration solution assuranceeq1.0
cisco:prime_central_for_hosted_collaboration_solution_assurancecisco prime central for hosted collaboration solution assuranceeq1.0.1
cisco:prime_central_for_hosted_collaboration_solution_assurancecisco prime central for hosted collaboration solution assuranceeq8.6
cisco:prime_central_for_hosted_collaboration_solution_assurancecisco prime central for hosted collaboration solution assuranceeq9.0

CPE	Name	Operator	Version
cisco:prime_central_for_hosted_collaboration_solution_assurance	cisco prime central for hosted collaboration solution assurance	le	9.1
cisco:prime_central_for_hosted_collaboration_solution_assurance	cisco prime central for hosted collaboration solution assurance	eq	1.0
cisco:prime_central_for_hosted_collaboration_solution_assurance	cisco prime central for hosted collaboration solution assurance	eq	1.0.1
cisco:prime_central_for_hosted_collaboration_solution_assurance	cisco prime central for hosted collaboration solution assurance	eq	8.6
cisco:prime_central_for_hosted_collaboration_solution_assurance	cisco prime central for hosted collaboration solution assurance	eq	9.0