CVE-2019-1906: Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability
A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by manipulating requests sent to an affected PI server. A successful exploit could allow the attacker to change the virtual domain configuration and possibly elevate privileges.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
CVE-2019-1906
What is the severity of CVE-2019-1906?
The severity of CVE-2019-1906 is medium with a CVSS score of 6.5.
What is the affected software by CVE-2019-1906?
The affected software by CVE-2019-1906 is Cisco Prime Infrastructure 3.6.
How can an attacker exploit CVE-2019-1906?
An attacker can exploit CVE-2019-1906 by abusing the improper validation of API requests in the Virtual Domain system of Cisco Prime Infrastructure.
Are there any references available for CVE-2019-1906?
Yes, you can refer to the following links for more information: http://www.securityfocus.com/bid/108855, https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-prime-privescal