Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2013-3473
HistorySep 20, 2013 - 6:55 p.m.

CVE-2013-3473

2013-09-2018:55:09
CWE-287
cisco
web.nvd.nist.gov
24
cisco
prime central
hosted collaboration solution
hcs
assurance
cve-2013-3473
nvd
bug id cscud32600
web framework
security vulnerability

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

55.9%

JSON

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.

Affected configurations

Nvd
Node
ciscoprime_central_for_hosted_collaboration_solution_assuranceRange≤9.1
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch1.0
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch1.0.1
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch8.6
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch9.0
VendorProductVersionCPE
ciscoprime_central_for_hosted_collaboration_solution_assurance*cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:*:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance1.0cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:1.0:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance1.0.1cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:1.0.1:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance8.6cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:8.6:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance9.0cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:9.0:*:*:*:*:*:*:*

Related

cisco 1
cvelist 1
prion 1
nvd 1
securityvulns 1
cisco
cisco
Cisco Prime Central for Hosted Collaboration Solution Assurance Unauthenticated Username and Password Enumeration Vulnerability
2013-09-18 16:00:00
cvelist
cvelist
CVE-2013-3473
2013-09-20 18:00:00
prion
prion
Design/Logic Flaw
2013-09-20 18:55:00
nvd
nvd
CVE-2013-3473
2013-09-20 18:55:09
securityvulns
securityvulns
Cisco Prime Data Center / Prime Central security vulnerabilities
2013-10-03 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

55.9%

JSON
Related for CVE-2013-3473
cisco1cvelist1prion1nvd1securityvulns1