Lucene search

K
nvd[email protected]NVD:CVE-2013-3473
HistorySep 20, 2013 - 6:55 p.m.

CVE-2013-3473

2013-09-2018:55:09
CWE-287
web.nvd.nist.gov
4

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

72.2%

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.

Affected configurations

Nvd
Node
ciscoprime_central_for_hosted_collaboration_solution_assuranceRange9.1
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch1.0
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch1.0.1
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch8.6
OR
ciscoprime_central_for_hosted_collaboration_solution_assuranceMatch9.0
VendorProductVersionCPE
ciscoprime_central_for_hosted_collaboration_solution_assurance*cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:*:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance1.0cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:1.0:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance1.0.1cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:1.0.1:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance8.6cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:8.6:*:*:*:*:*:*:*
ciscoprime_central_for_hosted_collaboration_solution_assurance9.0cpe:2.3:a:cisco:prime_central_for_hosted_collaboration_solution_assurance:9.0:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

72.2%

Related for NVD:CVE-2013-3473