PT-2015-7223 · Cisco · Cisco Prime Service Catalog

Publicado 2015-12-12 · Atualizado 2017-09-13 · CVE-2015-6395

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog versions 10.0 through 11.0

Description The issue allows remote attackers to modify the configuration via a direct request due to improper restriction of access to web pages.

Recommendations For Cisco Prime Service Catalog versions 10.0 through 11.0, restrict access to web pages to prevent unauthorized configuration modifications.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-6395

Produtos afetados

Cisco Prime Service Catalog

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151207-psc · Aviso do Fabricante
• http://securitytracker.com/id/1034313 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6395 · Nota de Segurança