CVE-2013-3473

Published: Sep 20, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.

Affected (5)

Products: Cisco: Prime Central For Hosted Collaboration Solution Assurance

Cisco

1 product

Prime Central For Hosted Collaboration Solution Assurance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Central For Hosted Collaboration Solution Assurance	Up to 9.1
Cisco Prime Central For Hosted Collaboration Solution Assurance	Version 1.0.1
Cisco Prime Central For Hosted Collaboration Solution Assurance	Version 1.0
Cisco Prime Central For Hosted Collaboration Solution Assurance	Version 8.6
Cisco Prime Central For Hosted Collaboration Solution Assurance	Version 9.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.