CVE-2015-4190
published 2015-06-17CVE-2015-4190: Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.33%
67.8th percentile
Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | prime_service_catalog | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Cloud Portal Appliance Pregenerated Default Host Keys Vulnerability
vendor_cisco·2015-06-16·CVSS 4.3
CVE-2015-4190 [MEDIUM] Cisco Cloud Portal Appliance Pregenerated Default Host Keys Vulnerability
Cisco Cloud Portal Appliance Pregenerated Default Host Keys Vulnerability
A vulnerability in Cisco Cloud Portal Appliance could aid an unauthenticated, remote attacker in performing a man-in-the-middle attack.
The vulnerability is due to a design error in the affected software. An unauthenticated, remote attacker could exploit this vulnerability to perform a man-in-the-middle attack against a user logging in to a targeted device. A successful exploit could be used to conduct further attacks.
Cisco has confirmed the vulnerability and released software updates.
Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.
GHSA
GHSA-qhq6-7qcv-gjxx: Cisco Cloud Portal in Cisco Prime Service Catalog 9
ghsa_unreviewed·2022-05-17
CVE-2015-4190 [MEDIUM] GHSA-qhq6-7qcv-gjxx: Cisco Cloud Portal in Cisco Prime Service Catalog 9
Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/viewAlert.x?alertId=39380http://www.securityfocus.com/bid/75271http://www.securitytracker.com/id/1032593http://www.securitytracker.com/id/1032594http://tools.cisco.com/security/center/viewAlert.x?alertId=39380http://www.securityfocus.com/bid/75271http://www.securitytracker.com/id/1032593http://www.securitytracker.com/id/1032594
2015-06-17
Published