Lucene search

K
cveCiscoCVE-2015-6262
HistoryAug 25, 2015 - 1:59 a.m.

CVE-2015-6262

2015-08-2501:59:10
CWE-352
cisco
web.nvd.nist.gov
30
cve-2015-6262
csrf
cisco prime infrastructure
vulnerability
hijack authentication
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

32.7%

Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059.

Affected configurations

Nvd
Node
ciscoprime_infrastructureMatch1.2.0.103
OR
ciscoprime_infrastructureMatch2.0
VendorProductVersionCPE
ciscoprime_infrastructure1.2.0.103cpe:2.3:a:cisco:prime_infrastructure:1.2.0.103:*:*:*:*:*:*:*
ciscoprime_infrastructure2.0cpe:2.3:a:cisco:prime_infrastructure:2.0:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

32.7%

Related for CVE-2015-6262