Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-4306
HistorySep 20, 2015 - 1:59 a.m.

CVE-2015-4306

2015-09-2001:59:03
CWE-264
[email protected]
web.nvd.nist.gov

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

JSON

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.

Affected configurations

NVD
Node
ciscoprime_collaboration_assuranceMatch9.0.0
OR
ciscoprime_collaboration_assuranceMatch9.5.0
OR
ciscoprime_collaboration_assuranceMatch10.0.0
OR
ciscoprime_collaboration_assuranceMatch10.5.0
OR
ciscoprime_collaboration_assuranceMatch10.5.1
OR
ciscoprime_collaboration_assuranceMatch10.6.0

Related

cve 1
prion 1
cvelist 1
nessus 1
cisco 1
securityvulns 1
cve
cve
CVE-2015-4306
2015-09-20 01:59:03
prion
prion
Code injection
2015-09-20 01:59:00
cvelist
cvelist
CVE-2015-4306
2015-09-20 01:00:00
nessus
nessus
Cisco Prime Collaboration Assurance Multiple Vulnerabilities (cisco-sa-20100217-csa)
2015-09-25 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
2015-09-16 16:00:00
securityvulns
securityvulns
Cisco Prime multiple security vulnerabilities
2015-10-12 00:00:00

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

JSON
Related for NVD:CVE-2015-4306
cve1prion1cvelist1nessus1cisco1securityvulns1