CVE-2016-1290
8.1
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.2
Source: NVD
Description
The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.
Affected (14)
Products: Cisco: Evolved Programmable Network Manager, Prime Infrastructure · Sun: Opensolaris
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.0 | |
| Version 1.2.0.103 | |
| Version snv_124 |
Related CWEs
References (4)
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.