Code injection

2016-07-0301:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

JSON

Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) in Cisco Configuration Assistant (CCA) allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145.

CPENameOperatorVersion
cloud_network_automation_provisionereq1.0.0

CPE	Name	Operator	Version
	cloud_network_automation_provisioner	eq	1.0.0

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160630-cca

www.securityfocus.com/bid/91523