CVE-2019-1662 — Improper Authentication in Cisco Prime Collaboration Assurance

CWE-287 — Improper Authentication4 documents4 sources
Severity
9.1CRITICALNVD
CNA8.2
EPSS
1.4%
top 19.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Prime Collaboration AssuranceCisco Prime Collaboration Assurance
Timeline
PublishedFeb 21
Latest updateMay 13

Description

A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the QOVR service with a valid username. A successful exploit could allow the attacker to perform actions with the privileges of the user that is used for access. This …

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-jcx4-2jj5-xr9c: A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated,↗2022-05-13
▶
CVEList
Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability↗2019-02-21
▶

📋Vendor Advisories

1
Cisco
Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability↗2019-02-20
▶
CVE-2019-1662 — Improper Authentication in Cisco | cvebase