CVE-2015-6395

Cisco Prime Service Catalog 10.0, 10.0R2, 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188...

CVE-2015-6395

CVE-2015-6395 affects Cisco Prime Service Catalog web interface (versions 10.0, 10.0R2, 10.1, 11.0). The vulnerability arises from insufficient access controls on web pages, allowing remote attackers to modify configuration via a direct URL request. Exploitation could enable unauthenticated, remo...