PT-2015-7223 · Cisco · Cisco Prime Service Catalog

Published 2015-12-12 · Updated 2017-09-13 · CVE-2015-6395

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog versions 10.0 through 11.0

Description The issue allows remote attackers to modify the configuration via a direct request due to improper restriction of access to web pages.

Recommendations For Cisco Prime Service Catalog versions 10.0 through 11.0, restrict access to web pages to prevent unauthorized configuration modifications.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-6395

Affected Products

Cisco Prime Service Catalog

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151207-psc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6395 · Security Note
• http://securitytracker.com/id/1034313 · Note