CVE-2016-1301

Published: Feb 7, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.

Affected (26)

Products: Cisco: Asa Cx Context Aware Security Software, Prime Security Manager

Cisco

2 products

Asa Cx Context Aware Security Software

Prime Security Manager

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Cisco Asa Cx Context Aware Security Software	Version 9.0.1-40
Cisco Asa Cx Context Aware Security Software	Version 9.0.1
Cisco Asa Cx Context Aware Security Software	Version 9.0.2-68
Cisco Asa Cx Context Aware Security Software	Version 9.0.2
Cisco Asa Cx Context Aware Security Software	Version 9.0_base
Cisco Asa Cx Context Aware Security Software	Version 9.1.2-29
Cisco Asa Cx Context Aware Security Software	Version 9.1.2-42
Cisco Asa Cx Context Aware Security Software	Version 9.1.3-10
Cisco Asa Cx Context Aware Security Software	Version 9.1.3-13
Cisco Asa Cx Context Aware Security Software	Version 9.1.3-8
Cisco Asa Cx Context Aware Security Software	Version 9.2.1-1
Cisco Asa Cx Context Aware Security Software	Version 9.2.1-2
Cisco Asa Cx Context Aware Security Software	Version 9.2.1-3
Cisco Asa Cx Context Aware Security Software	Version 9.2.1-4
Cisco Prime Security Manager	Version 9.0.0
Cisco Prime Security Manager	Version 9.0.1-40
Cisco Prime Security Manager	Version 9.0.2-68
Cisco Prime Security Manager	Version 9.1.0
Cisco Prime Security Manager	Version 9.1.2-29
Cisco Prime Security Manager	Version 9.1.2-42
Cisco Prime Security Manager	Version 9.1.3-10
Cisco Prime Security Manager	Version 9.1.3-13
Cisco Prime Security Manager	Version 9.1.3-8
Cisco Prime Security Manager	Version 9.2.0
Cisco Prime Security Manager	Version 9.2.1-1
Cisco Prime Security Manager	Version 9.2.1-2