CVE-2015-4307
published 2015-09-20CVE-2015-4307: The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create…
PriorityP346critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
2.64%
83.8th percentile
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning_web_framework | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_cisco8.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rjh7-24vr-w43c: The web framework in Cisco Prime Collaboration Provisioning before 11
ghsa_unreviewed·2022-05-17
CVE-2015-4307 [HIGH] GHSA-rjh7-24vr-w43c: The web framework in Cisco Prime Collaboration Provisioning before 11
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.
Cisco
Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
vendor_cisco·2015-09-16·CVSS 8.5
CVE-2015-4307 [HIGH] CWE-264 Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
A vulnerability in the web framework of Cisco Prime Collaboration Provisioning could allow an
authenticated, remote attacker to access higher-privileged functions.
An exploit could
allow the attacker to access functions, some of which should be accessible only to users who have administrative privileges. This includes creating an administrative user.
Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pcp
Cisco
Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
vendor_cisco
CVE-2015-4307 Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
CVE-2015-4307: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability
A vulnerability in the web framework of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to access higher-privileged functions. An exploit could allow the attacker to access functions, some of which should be accessible only to users who have administrative privileges. This includes creating an administrative user. Cisco has released software updates that address this vulnerability.
CWE: CWE-264, CWE-264
Bug IDs: CSCut64111, CSCut64111
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-09-20
Published