CVE-2017-3810
First published: Fri Feb 03 2017(Updated: )
A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Releases: 10.0_R2_tanggula.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime Service Catalog | =10.0\(r2\)_base |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3810?
The severity of CVE-2017-3810 is medium, with a score of 5.4.
How do I fix CVE-2017-3810?
To remediate CVE-2017-3810, it is advised to upgrade to a patched version of Cisco Prime Service Catalog.
What type of attack can be conducted using CVE-2017-3810?
CVE-2017-3810 allows an authenticated remote attacker to conduct a web URL redirect attack.
Which versions of Cisco Prime Service Catalog are affected by CVE-2017-3810?
Cisco Prime Service Catalog version 10.0\(R2\)_base is known to be affected by CVE-2017-3810.
Can CVE-2017-3810 be exploited without authentication?
No, CVE-2017-3810 requires an authenticated user to be exploited.
- collector/nvd-index
- vendor/cisco
- product/prime service catalog
- canonical/cisco prime service catalog