CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

Default credentials

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

CVE-2015-6296

CVE-2015-6296 affects Cisco Prime Network Registrar (CPNR) versions 8.1(3.3), 8.2(3), and 8.3(2). A default/insecure local account exists, enabling an authenticated, local attacker to obtain root privileges on the affected device. Cisco’s advisory notes that software updates are not available to ...

CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities in Prime Collaboration Assurance, Prime Collaboration Provisioning, and TelePresence Server software. Exploitation of these vulnerabilities could allow a remote attacker to escalate privileges, obtain sensitive information, or cause a...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to access information about any device imported into the system database. The vulnerability is due to improper implementation of authorization and access controls. An attacker...

Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to access higher-privileged functions. An exploit could allow the attacker to access functions, some of which should be accessible only to users who have administrative...

Multiple Vulnerabilities in Cisco Prime Collaboration Assurance

Cisco Prime Collaboration Assurance Software contains the following vulnerabilities: Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability Cisco Prime Collaboration Assurance Information Disclosure Vulnerability Cisco Prime Collaboration Assurance Session ID...

Password Cracking Group Decodes 11 Million Ashley Madison Passwords

A San Diego-based password cracking group has taken a big step towards deciphering some of the 36 million odd passwords leaked in last month’s Ashley Madison breach, a move that could quickly lead to the widespread hacking of any users who used the same password on other services. Hackers had...

CVE-2015-6262

Cross-site request forgery CSRF vulnerability in Cisco Prime Infrastructure 1.20.103 and 2.00.0 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Prime Infrastructure 1.20.103 and 2.00.0 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059...

CVE-2015-6262

Cross-site request forgery CSRF vulnerability in Cisco Prime Infrastructure 1.20.103 and 2.00.0 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059...

CVE-2015-6262

CVE-2015-6262 describes a cross-site request forgery vulnerability in Cisco Prime Infrastructure (versions 1.2(0.103) and 2.0(0.0)) that could allow remote attackers to hijack a user’s session. Root cause: insufficient CSRF protections in the web interface. Exploitation involves luring a user to ...

Cisco Prime Infrastructure Web Interface Cross-Site Request Forgery Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. A cross-site request forgery vulnerability exists in Cisco Prime Infrastructure that could...

Cisco Prime Infrastructure Web Interface Cross-Site Request Forgery Vulnerability

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this...

CVE-2015-4331

Cisco Prime Infrastructure PI 1.40.45 and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958...

Authentication flaw

Cisco Prime Infrastructure PI 1.40.45 and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958...

CVE-2015-4331

Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier stores case-sensitive usernames and performs case-sensitive string comparisons. When AAA authentication is configured, remote authenticated users can bypass access restrictions by using a username with mixed-case characters, potentially leadin...

CVE-2015-4331

Cisco Prime Infrastructure PI 1.40.45 and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958...

Cisco Prime Infrastructure Elevation of Privilege Vulnerability

Cisco Prime Infrastructure is a wireless management solution through Cisco Prime LAN Management Solution and Cisco Prime Network Control System technologies. A security vulnerability exists in Cisco Prime Infrastructure, as the program stores case-sensitive usernames and performs case-sensitive...