CVE-2016-1301 The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to ch...
HighCVSS 8.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime security manager | = 9.0.0 | No fix listed |
| cisco prime security manager | = 9.0.1-40 | No fix listed |
| cisco prime security manager | = 9.0.2-68 | No fix listed |
| cisco prime security manager | = 9.1.0 | No fix listed |
| cisco prime security manager | = 9.1.2-29 | No fix listed |
| cisco prime security manager | = 9.1.2-42 | No fix listed |
| cisco prime security manager | = 9.1.3-8 | No fix listed |
| cisco prime security manager | = 9.1.3-10 | No fix listed |
| cisco prime security manager | = 9.1.3-13 | No fix listed |
| cisco prime security manager | = 9.2.0 | No fix listed |
| cisco prime security manager | = 9.2.1-1 | No fix listed |
| cisco prime security manager | = 9.2.1-2 | No fix listed |
| cisco asa cx context-aware security software | = 9.0.1 | No fix listed |
| cisco asa cx context-aware security software | = 9.0.1-40 | No fix listed |
| cisco asa cx context-aware security software | = 9.0.2 | No fix listed |
| cisco asa cx context-aware security software | = 9.0.2-68 | No fix listed |
| cisco asa cx context-aware security software | = 9.0_base | No fix listed |
| cisco asa cx context-aware security software | = 9.1.2-29 | No fix listed |
| cisco asa cx context-aware security software | = 9.1.2-42 | No fix listed |
| cisco asa cx context-aware security software | = 9.1.3-8 | No fix listed |
| cisco asa cx context-aware security software | = 9.1.3-10 | No fix listed |
| cisco asa cx context-aware security software | = 9.1.3-13 | No fix listed |
| cisco asa cx context-aware security software | = 9.2.1-1 | No fix listed |
| cisco asa cx context-aware security software | = 9.2.1-2 | No fix listed |
| cisco asa cx context-aware security software | = 9.2.1-3 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asa cx context-aware security software | = 9.2.1-4 | No fix listed |
References
- 20160203 Cisco ASA-CX and Cisco Prime Security Manager Privilege Escalation Vulnerability vendor-advisory
- 1034926 vdb-entry
- 1034927 vdb-entry