CVE-2015-4304 The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data...
HighCVSS 9.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime collaboration assurance | = 9.0.0 | No fix listed |
| cisco prime collaboration assurance | = 9.5.0 | No fix listed |
| cisco prime collaboration assurance | = 10.0.0 | No fix listed |
| cisco prime collaboration assurance | = 10.5.0 | No fix listed |
| cisco prime collaboration assurance | = 10.5.1 | No fix listed |
| cisco prime collaboration assurance | = 10.6.0 | No fix listed |
References
- 20150916 Multiple Vulnerabilities in Cisco Prime Collaboration Assurance vendor-advisory
- 1033581 third-party-advisory vdb-entry