CVE-2015-4306

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read…

published September 20, 2015

CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02279 · 82.9th percentile
Published
2015-09-20T01:00Z
EPSS history
Timeline
  • 20 SEP 01:00Z
    The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read…
    cvelistv5