CVE-2017-3869
published 2017-03-17CVE-2017-3869: An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that…
PriorityP430medium5.4CVSS 3.0
AVNACLPRLUINSUCLILAN
EPSS
0.96%
57.3th percentile
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases: 3.1(1) 3.1(1).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | prime_infrastructure | — | — |
| cisco | prime_infrastructure | — | — |
CVSS provenance
nvdv3.05.4MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
vendor_cisco5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-59m2-h4gm-362r: An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API
ghsa_unreviewed·2022-05-13
CVE-2017-3869 [MEDIUM] GHSA-59m2-h4gm-362r: An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases: 3.1(1) 3.1(1).
Cisco
Cisco Prime Infrastructure API Credentials Management Vulnerability
vendor_cisco·2017-03-15·CVSS 5.4
CVE-2017-3869 [MEDIUM] CWE-255 Cisco Prime Infrastructure API Credentials Management Vulnerability
Cisco Prime Infrastructure API Credentials Management Vulnerability
A vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials.
The vulnerability is due to a lack of proper role-based access control (RBAC) for certain APIs in the application. An attacker could exploit this vulnerability by authenticating to specific APIs as a low-privileged user. An exploit could allow the attacker to view or modify system configuration information. The API usage should be restricted based on the user's privilege level.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.c
Cisco
Cisco Prime Infrastructure API Credentials Management Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-3869 Cisco Prime Infrastructure API Credentials Management Vulnerability
CVE-2017-3869: Cisco Prime Infrastructure API Credentials Management Vulnerability
A vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. The vulnerability is due to a lack of proper role-based access control (RBAC) for certain APIs in the application. An attacker could exploit this vulnerability by authenticating to specific APIs as a low-privileged user. An exploit could allow the attacker to view or modify system configuration information. The API usage should be restricted based on the user's privilege level. There are no
CVSS: 3.0
CWE: CWE-255, CWE-255
Bug IDs: CSCuy36192
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/96931http://www.securitytracker.com/id/1038048https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpihttp://www.securityfocus.com/bid/96931http://www.securitytracker.com/id/1038048https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi
2017-03-17
Published