Design/Logic Flaw

2015-09-2001:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.5%

JSON

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656.

CPENameOperatorVersion
prime_collaboration_assuranceeq10.5.1
prime_collaboration_assuranceeq10.0.0
prime_collaboration_assuranceeq9.0.0
prime_collaboration_assuranceeq10.6.0
prime_collaboration_assuranceeq9.5.0
prime_collaboration_assuranceeq10.5.0

Name	Operator	Version
prime_collaboration_assurance	eq	10.5.1
prime_collaboration_assurance	eq	10.0.0
prime_collaboration_assurance	eq	9.0.0
prime_collaboration_assurance	eq	10.6.0
prime_collaboration_assurance	eq	9.5.0
prime_collaboration_assurance	eq	10.5.0