What is CVE-2019-1874?

CVE-2019-1874 is a vulnerability in the web-based management interface of Cisco Prime Service Catalog Software that allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.

How does CVE-2019-1874 impact Cisco Prime Service Catalog Software?

CVE-2019-1874 exposes Cisco Prime Service Catalog Software to CSRF attacks, which can be launched remotely by an unauthenticated attacker.

What is the severity of CVE-2019-1874?

CVE-2019-1874 has a severity rating of 8.8 (high).

How can I fix CVE-2019-1874?

To fix CVE-2019-1874, Cisco Prime Service Catalog Software should be updated to a version that includes sufficient CSRF protection mechanisms.

Where can I find more information about CVE-2019-1874?

You can find more information about CVE-2019-1874 in the following references: [http://www.securityfocus.com/bid/108861](http://www.securityfocus.com/bid/108861) and [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-psc-csrf](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-psc-csrf).

Vulnerability/
CVE-2019-1874

high

8.8

CWE

352

20/6/2019

20/11/2024

CVE-2019-1874: Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability

First published: Thu Jun 20 2019(Updated: )

A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protection mechanisms on the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Prime Service Catalog	=11.0
Cisco Prime Service Catalog	=11.1
Cisco Prime Service Catalog	=12.0
Cisco Prime Service Catalog	=12.1

Remedy

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-psc-csrf

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-1874?
CVE-2019-1874 is a vulnerability in the web-based management interface of Cisco Prime Service Catalog Software that allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.
How does CVE-2019-1874 impact Cisco Prime Service Catalog Software?
CVE-2019-1874 exposes Cisco Prime Service Catalog Software to CSRF attacks, which can be launched remotely by an unauthenticated attacker.
What is the severity of CVE-2019-1874?
CVE-2019-1874 has a severity rating of 8.8 (high).
How can I fix CVE-2019-1874?
To fix CVE-2019-1874, Cisco Prime Service Catalog Software should be updated to a version that includes sufficient CSRF protection mechanisms.
Where can I find more information about CVE-2019-1874?
You can find more information about CVE-2019-1874 in the following references: [http://www.securityfocus.com/bid/108861](http://www.securityfocus.com/bid/108861) and [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-psc-csrf](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-psc-csrf).

collector/nvd-index
agent/references
agent/softwarecombine
agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/remedy
agent/weakness
agent/title
agent/last-modified-date
agent/author
agent/tags
agent/description
agent/first-publish-date
agent/event
vendor/cisco
canonical/cisco prime service catalog
version/cisco prime service catalog/11.0
version/cisco prime service catalog/11.1
version/cisco prime service catalog/12.0
version/cisco prime service catalog/12.1