CVE-2015-6395

2015-12-1211:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2015-6395

cisco

prime service catalog

bug id cscuw48188

access restriction

remote attack

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.6%

JSON

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

Affected configurations

NVD

Node

ciscoprime_service_catalogMatch10.0\(r2\)_base

ciscoprime_service_catalogMatch10.0_base

ciscoprime_service_catalogMatch10.1_base

ciscoprime_service_catalogMatch11.0_base

CPENameOperatorVersion
cisco:prime_service_catalogcisco prime service catalogeq10.0\(r2\)_base
cisco:prime_service_catalogcisco prime service catalogeq10.0_base
cisco:prime_service_catalogcisco prime service catalogeq10.1_base
cisco:prime_service_catalogcisco prime service catalogeq11.0_base

CPE	Name	Operator	Version
cisco:prime_service_catalog	cisco prime service catalog	eq	10.0\(r2\)_base
cisco:prime_service_catalog	cisco prime service catalog	eq	10.0_base
cisco:prime_service_catalog	cisco prime service catalog	eq	10.1_base
cisco:prime_service_catalog	cisco prime service catalog	eq	11.0_base