PT-2021-7487

Name of the Vulnerable Software and Affected Versions Cisco Nexus Insights affected versions not specified Description The issue is related to the web interface of Cisco Nexus Insights, where a vulnerability allows an authenticated, remote attacker to view and download files related to the web...

PT-2018-7167

Name of the Vulnerable Software and Affected Versions: CloudForms Management Engine cfme versions prior to 5.7.3 CloudForms Management Engine cfme versions 5.8.x prior to 5.8.1 Description: The issue is related to a lack of Role-Based Access Control RBAC controls on certain methods within the rai...

PT-2018-8602

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS System Software affected versions not specified Description: A vulnerability in the network-operator user role implementation could allow an authenticated, local attacker to improperly delete valid user accounts due to a lack of...

PT-2017-17204

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 12.1 Description The issue arises from the software's failure to properly validate HTTP request inputs and apply role-based access controls RBACs to requested HTTP URLs. This...

PT-2017-17185

Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Probe Software version 1.0.0 Description The issue is related to the file-download feature of the web user interface, where the absence of role-based access control RBAC for file-download requests allows an authenticated,...

CVE-2017-6614: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...