CVE-2015-6395

2015-12-1211:00:00

cisco

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.6%

JSON

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151207-psc

www.securitytracker.com/id/1034313