CVE-2015-4307: Critical severity cisco prime collaboration provisioning vulnerability
Published Sep 20, 2015
·Updated
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.
Affected Software
6 affected components
Cisco Prime Collaboration Provisioning=9.0.0
Cisco Prime Collaboration Provisioning=9.5.0
Cisco Prime Collaboration Provisioning=10.0.0
Cisco Prime Collaboration Provisioning=10.5.0
Cisco Prime Collaboration Provisioning=10.5.1
Cisco Prime Collaboration Provisioning=10.6.0
Event History
Sep 20, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4307?
CVE-2015-4307 has a medium severity rating, allowing remote authenticated users to potentially exploit the vulnerability.
2
How do I fix CVE-2015-4307?
To fix CVE-2015-4307, upgrade your Cisco Prime Collaboration Provisioning to version 11.0 or later.
3
Which versions of Cisco Prime Collaboration Provisioning are affected by CVE-2015-4307?
CVE-2015-4307 affects Cisco Prime Collaboration Provisioning versions 9.0.0, 9.5.0, 10.0.0, 10.5.0, 10.5.1, and 10.6.0.
4
Can CVE-2015-4307 be exploited remotely?
Yes, CVE-2015-4307 can be exploited remotely by authenticated users who use a crafted URL to bypass access restrictions.
5
What type of vulnerability is CVE-2015-4307 classified as?
CVE-2015-4307 is classified as an access control vulnerability.