8.1

CVE-2016-1290

The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Prime Infrastructure Version 1.2
Cisco ≫ Prime Infrastructure Version 1.2.0.103
Cisco ≫ Prime Infrastructure Version 1.2.1
Cisco ≫ Prime Infrastructure Version 1.3
Cisco ≫ Prime Infrastructure Version 1.3.0.20
Cisco ≫ Prime Infrastructure Version 1.4
Cisco ≫ Prime Infrastructure Version 1.4.0.45
Cisco ≫ Prime Infrastructure Version 1.4.1
Cisco ≫ Prime Infrastructure Version 1.4.2
Cisco ≫ Prime Infrastructure Version 2.0
Cisco ≫ Prime Infrastructure Version 2.1.0
Cisco ≫ Prime Infrastructure Version 2.2
Sun ≫ Opensolaris Version snv_124 Edition sparc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.49% 0.708
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.8 5.2
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-privauth
Vendor Advisory
http://www.securitytracker.com/id/1035498