CVE-2015-4305: Medium severity cisco prime collaboration assurance vulnerability
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4305?
CVE-2015-4305 is rated as a high-severity vulnerability due to its potential for exposing sensitive information.
How do I fix CVE-2015-4305?
To mitigate CVE-2015-4305, upgrading to Cisco Prime Collaboration Assurance version 10.5.1.53684-1 or later is recommended.
What types of data can be accessed due to CVE-2015-4305?
CVE-2015-4305 allows attackers to discover credentials or SNMP communities for arbitrary tenant domains.
Who is affected by CVE-2015-4305?
CVE-2015-4305 affects remote authenticated users of Cisco Prime Collaboration Assurance versions prior to 10.5.1.53684-1.
What causes CVE-2015-4305?
CVE-2015-4305 is caused by improper access controls in the web framework of Cisco Prime Collaboration Assurance.