PT-2013-4423 · Cisco · Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

Published 2013-09-20 · Updated 2013-09-23 · CVE-2013-3473

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance versions prior to 9.1.1

Description The issue is related to the web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance, which does not properly determine the existence of an authenticated session. This allows remote attackers to discover usernames and passwords via an HTTP request.

Recommendations For versions prior to 9.1.1, update to version 9.1.1 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-3473

Affected Products

Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-3473 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc · Vendor Advisory