PT-2016-4732 · Cisco · Cisco Prime Lan Management Solution

Publicado 2016-03-12 · Atualizado 2016-12-03 · CVE-2016-1360

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime LAN Management Solution (LMS) versions through 4.2.5

Description The issue allows local users to obtain cleartext data by leveraging console connectivity, due to the use of the same database decryption key across different customers' installations.

Recommendations For versions through 4.2.5, update to a version that uses unique database decryption keys for each customer's installation to prevent unauthorized access to cleartext data.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-1360

Produtos afetados

Cisco Prime Lan Management Solution

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-1360 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1360 · Nota de Segurança
• http://securitytracker.com/id/1035313 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160310-prime-lms · Aviso do Fabricante