Vulnerability in Cisco Prime Service Catalog

CVE-2015-6395

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

EPSS: 0.015 (71.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Prime_service_catalog — versions 10.0\(r2\)_base, 10.0_base, 10.1_base
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)