CVE-2015-4304

2015-09-2001:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cisco

prime collaboration assurance

cve-2015-4304

web framework

access restrictions

security vulnerability

nvd

6.4 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

52.2%

JSON

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652.

CPENameOperatorVersion
cisco:prime_collaboration_assurancecisco prime collaboration assuranceeq10.5.1
cisco:prime_collaboration_assurancecisco prime collaboration assuranceeq10.0.0
cisco:prime_collaboration_assurancecisco prime collaboration assuranceeq9.0.0
cisco:prime_collaboration_assurancecisco prime collaboration assuranceeq10.6.0
cisco:prime_collaboration_assurancecisco prime collaboration assuranceeq9.5.0
cisco:prime_collaboration_assurancecisco prime collaboration assuranceeq10.5.0

CPE	Name	Operator	Version
cisco:prime_collaboration_assurance	cisco prime collaboration assurance	eq	10.5.1
cisco:prime_collaboration_assurance	cisco prime collaboration assurance	eq	10.0.0
cisco:prime_collaboration_assurance	cisco prime collaboration assurance	eq	9.0.0
cisco:prime_collaboration_assurance	cisco prime collaboration assurance	eq	10.6.0
cisco:prime_collaboration_assurance	cisco prime collaboration assurance	eq	9.5.0
cisco:prime_collaboration_assurance	cisco prime collaboration assurance	eq	10.5.0