Code injection

2015-09-2001:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

JSON

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.

CPENameOperatorVersion
prime_collaboration_assuranceeq10.5.1
prime_collaboration_assuranceeq10.0.0
prime_collaboration_assuranceeq9.0.0
prime_collaboration_assuranceeq10.6.0
prime_collaboration_assuranceeq9.5.0
prime_collaboration_assuranceeq10.5.0

Name	Operator	Version
prime_collaboration_assurance	eq	10.5.1
prime_collaboration_assurance	eq	10.0.0
prime_collaboration_assurance	eq	9.0.0
prime_collaboration_assurance	eq	10.6.0
prime_collaboration_assurance	eq	9.5.0
prime_collaboration_assurance	eq	10.5.0