CVE-2015-4306
published 2015-09-20CVE-2015-4306: The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read…
PriorityP341high8.5CVSS 2.0
AVNACMAuSCCICAC
EPSS
2.28%
81.1th percentile
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | prime_collaboration_assurance | — | — |
| cisco | prime_collaboration_assurance | — | — |
| cisco | prime_collaboration_assurance | — | — |
| cisco | prime_collaboration_assurance | — | — |
| cisco | prime_collaboration_assurance | — | — |
| cisco | prime_collaboration_assurance | — | — |
| cisco | prime_collaboration_assurance | — | — |
CVSS provenance
nvdv2.08.5HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C
vendor_cisco9.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gxxg-46w4-8xx4: The web framework in Cisco Prime Collaboration Assurance before 10
ghsa_unreviewed·2022-05-17
CVE-2015-4306 [HIGH] GHSA-gxxg-46w4-8xx4: The web framework in Cisco Prime Collaboration Assurance before 10
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.
Cisco
Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
vendor_cisco·2015-09-16·CVSS 9.0
CVE-2015-4304 [CRITICAL] CWE-264 Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
Cisco Prime Collaboration Assurance Software contains the following vulnerabilities:
Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability
Cisco Prime Collaboration Assurance Information Disclosure Vulnerability
Cisco Prime Collaboration Assurance Session ID Privilege Escalation Vulnerability
Successful exploitation of the Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability and Cisco Prime Collaboration Assurance Session ID Privilege Escalation Vulnerability could allow an authenticated attacker to perform tasks with the privileges of an administrator for any domain or customer managed by the affected system.
Successful exploitation of the Cisco Prime Col
Cisco
Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
vendor_cisco
CVE-2015-4306 Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
CVE-2015-4306: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance
Cisco Prime Collaboration Assurance Software contains the following vulnerabilities: Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability Cisco Prime Collaboration Assurance Information Disclosure Vulnerability Cisco Prime Collaboration Assurance Session ID Privilege Escalation Vulnerability Successful exploitation of the Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability and Cisco Prime Collaboration Assurance Session ID Privilege Escalation Vulnerability could allow an authenticated attacker to perform tasks with the privileges of an administrator for any domain or customer managed by the affected system. Successful exploitation of the Cisco
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-09-20
Published