CVE-2015-4304

CVE-2015-4304 — Cisco Prime Collaboration Assurance : The web framework (Cisco Prime Collaboration Assurance) before 10.5.1.53684-1 contains an authorization/access control flaw in its web framework that allows an authenticated remote attacker to bypass restrictions via a crafted URL. This can en...

CVE-2015-4304: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652...

CVE-2015-4306: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...

CVE-2015-4307: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...

PT-2015-6515

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning versions prior to 11.0 Description The issue allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL. Recommendations For versions pri...

PT-2015-6514

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended login-session read restrictions and impersonate administrators of arbitrary tenant domains by...

PT-2015-6513

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended system-database read restrictions. This can lead to the discovery of credentials or SNMP communitie...

CVE-2015-4305: Undefined Security Weakness

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...

PT-2015-6512

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1 Description The issue allows remote authenticated users to bypass intended access restrictions. This can lead to the creation of administrative accounts or the ability to rea...

CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

Default credentials

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

CVE-2015-6296

CVE-2015-6296 affects Cisco Prime Network Registrar (CPNR) versions 8.1(3.3), 8.2(3), and 8.3(2). A default/insecure local account exists, enabling an authenticated, local attacker to obtain root privileges on the affected device. Cisco’s advisory notes that software updates are not available to ...

CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

CVE-2015-6296: Undefined Security Weakness

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

PT-2015-7160

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Registrar versions 8.13.3 through 8.32 Description The issue allows local users to obtain root access by leveraging knowledge of the default account credentials. Recommendations For versions 8.13.3 through 8.32, change the...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities in Prime Collaboration Assurance, Prime Collaboration Provisioning, and TelePresence Server software. Exploitation of these vulnerabilities could allow a remote attacker to escalate privileges, obtain sensitive information, or cause a...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to access information about any device imported into the system database. The vulnerability is due to improper implementation of authorization and access controls. An attacker...

Multiple Vulnerabilities in Cisco Prime Collaboration Assurance

Cisco Prime Collaboration Assurance Software contains the following vulnerabilities: Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability Cisco Prime Collaboration Assurance Information Disclosure Vulnerability Cisco Prime Collaboration Assurance Session ID...

Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to access higher-privileged functions. An exploit could allow the attacker to access functions, some of which should be accessible only to users who have administrative...