PT-2013-4423 · Cisco · Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

Publicado 2013-09-20 · Atualizado 2013-09-23 · CVE-2013-3473

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance versions prior to 9.1.1

Description The issue is related to the web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance, which does not properly determine the existence of an authenticated session. This allows remote attackers to discover usernames and passwords via an HTTP request.

Recommendations For versions prior to 9.1.1, update to version 9.1.1 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-3473

Produtos afetados

Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-3473 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc · Aviso do Fabricante