PT-2016-4791

Name of the Vulnerable Software and Affected Versions Cisco Cloud Network Automation Provisioner CNAP version 1.00 in Cisco Configuration Assistant CCA Description The issue allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls...

CVE-2016-1441: Improper Input Validation

Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...

Cisco Configuration Assistant Request Processing Unauthorized Access Vulnerability

A vulnerability in Cisco Configuration Assistant CCA could allow an unauthenticated, remote attacker to access sensitive file systems and administrative endpoints without user authentication. The vulnerability is due to lack of controller mechanisms and input validation checks. An attacker could...

CVE-2016-1393

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...

PT-2016-4760

Name of the Vulnerable Software and Affected Versions Cisco Cloud Network Automation Provisioner CNAP versions 1.0 through 1.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via a crafted URL. Recommendations For Cisco Cloud Network Automation Provisione...

CVE-2016-1393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner CNAP 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175...