PT-2017-1542 · Cisco · Cisco Prime Infrastructure

Published 2017-03-17 · Updated 2019-10-03 · CVE-2017-3869

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 3.1(1)

Description The issue is related to errors in managing registration data in the Credentials Management interface of Cisco Prime Infrastructure. This could allow a remote attacker with valid credentials to access beyond their privileges. The attacker must have valid mandates to exploit this issue.

Recommendations For version 3.1(1), update to a version that includes the fix for this issue, as indicated by reference CSCuy36192.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

BDU:2017-00687

CVE-2017-3869

Affected Products

Cisco Prime Infrastructure

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-3869 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3869 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00687 · Security Note
• http://securitytracker.com/id/1038048 · Note
• http://securityfocus.com/bid/96931 · Note