CVE-2015-6389: Critical severity cisco prime collaboration assurance vulnerability
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6389?
CVE-2015-6389 is categorized as a high severity vulnerability due to the presence of a hardcoded account that can be exploited by remote attackers.
How do I fix CVE-2015-6389?
To fix CVE-2015-6389, upgrade Cisco Prime Collaboration Assurance to version 11.0 or later where the hardcoded account issue is resolved.
What type of attack can exploit CVE-2015-6389?
CVE-2015-6389 can be exploited through unauthorized SSH access by using the hardcoded cmuser account.
What versions of Cisco Prime Collaboration Assurance are affected by CVE-2015-6389?
CVE-2015-6389 affects Cisco Prime Collaboration Assurance versions 10.5.1 and 10.6.0.
Is CVE-2015-6389 a remote access vulnerability?
Yes, CVE-2015-6389 allows remote attackers to gain access through an SSH session.