Design/Logic Flaw

2016-03-1202:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers’ installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390.

CPENameOperatorVersion
prime_lan_management_solutioneq4.2.0-base
prime_lan_management_solutioneq4.2.1
prime_lan_management_solutioneq4.2.3
prime_lan_management_solutioneq4.2.5
prime_lan_management_solutioneq4.2.4
prime_lan_management_solutioneq4.2.2
prime_lan_management_solutioneq4.1.0-base

Name	Operator	Version
prime_lan_management_solution	eq	4.2.0-base
prime_lan_management_solution	eq	4.2.1
prime_lan_management_solution	eq	4.2.3
prime_lan_management_solution	eq	4.2.5
prime_lan_management_solution	eq	4.2.4
prime_lan_management_solution	eq	4.2.2
prime_lan_management_solution	eq	4.1.0-base