CVE-2015-4307 The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, a...
HighCVSS 9.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime collaboration provisioning | = 9.0.0 | No fix listed |
| cisco prime collaboration provisioning | = 9.5.0 | No fix listed |
| cisco prime collaboration provisioning | = 10.0.0 | No fix listed |
| cisco prime collaboration provisioning | = 10.5.0 | No fix listed |
| cisco prime collaboration provisioning | = 10.5.1 | No fix listed |
| cisco prime collaboration provisioning | = 10.6.0 | No fix listed |
References
- 20150916 Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability vendor-advisory
- 1033579 third-party-advisory vdb-entry