PT-2016-4791 · Cisco · Cisco Configuration Assistant+1

Publicado 2016-07-03 · Atualizado 2016-11-28 · CVE-2016-1441

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Cloud Network Automation Provisioner (CNAP) version 1.0(0) in Cisco Configuration Assistant (CCA)

Description The issue allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls.

Recommendations For Cisco Cloud Network Automation Provisioner (CNAP) version 1.0(0) in Cisco Configuration Assistant (CCA), at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-1441

Produtos afetados

Cisco Cloud Network Automation Provisioner

Cisco Configuration Assistant

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-1441 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1441 · Nota de Segurança
• http://securityfocus.com/bid/91523 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160630-cca · Aviso do Fabricante