CVE-2015-4307

2015-09-2001:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cisco

prime

collaboration

provisioning

web framework

access restriction

bypass

cve-2015-4307

bug id cscut64111

nvd

6.4 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

52.2%

JSON

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.

CPENameOperatorVersion
cisco:prime_collaboration_provisioningcisco prime collaboration provisioningeq9.5.0
cisco:prime_collaboration_provisioningcisco prime collaboration provisioningeq9.0.0
cisco:prime_collaboration_provisioningcisco prime collaboration provisioningeq10.5.1
cisco:prime_collaboration_provisioningcisco prime collaboration provisioningeq10.6.0
cisco:prime_collaboration_provisioningcisco prime collaboration provisioningeq10.5.0
cisco:prime_collaboration_provisioningcisco prime collaboration provisioningeq10.0.0

CPE	Name	Operator	Version
cisco:prime_collaboration_provisioning	cisco prime collaboration provisioning	eq	9.5.0
cisco:prime_collaboration_provisioning	cisco prime collaboration provisioning	eq	9.0.0
cisco:prime_collaboration_provisioning	cisco prime collaboration provisioning	eq	10.5.1
cisco:prime_collaboration_provisioning	cisco prime collaboration provisioning	eq	10.6.0
cisco:prime_collaboration_provisioning	cisco prime collaboration provisioning	eq	10.5.0
cisco:prime_collaboration_provisioning	cisco prime collaboration provisioning	eq	10.0.0