PT-2017-1542 · Cisco · Cisco Prime Infrastructure

Publicado 2017-03-17 · Atualizado 2019-10-03 · CVE-2017-3869

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 3.1(1)

Description The issue is related to errors in managing registration data in the Credentials Management interface of Cisco Prime Infrastructure. This could allow a remote attacker with valid credentials to access beyond their privileges. The attacker must have valid mandates to exploit this issue.

Recommendations For version 3.1(1), update to a version that includes the fix for this issue, as indicated by reference CSCuy36192.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

BDU:2017-00687

CVE-2017-3869

Produtos afetados

Cisco Prime Infrastructure

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-3869 · Nota de Segurança
• http://securitytracker.com/id/1038048 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-3869 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-00687 · Nota de Segurança
• http://securityfocus.com/bid/96931 · Nota