CVE-2015-6395

Severity

65%

Complexity

80%

Confidentiality

106%

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:P).

Overview

Type

Cisco Prime Service Catalog

First reported 9 years ago

2015-12-12 11:59:00

Last updated 7 years ago

2017-09-13 01:29:00

Affected Software

Cisco Prime Service Catalog 10.0(R2) Base

10.0\(r2\)_base

Cisco Prime Service Catalog 10.0 Base

10.0_base

Cisco Prime Service Catalog 10.1 Base

10.1_base

Cisco Prime Service Catalog 11.0 BASE

11.0_base

References

20151207 Cisco Prime Service Catalog Web Interface Unauthorized Access Vulnerability

Vendor Advisory

1034313

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.