Vulnerability Bulletins |
Cisco Prime Collaboration Assurance Information Disclosure Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the web framework of Cisco Prime CollaborationAssurance could allow an authenticated, remote attacker to accessinformation about any device imported into the system database.Thevulnerability is due to improper implementation of authorization andaccess controls. An attacker could exploit this vulnerability by sendingcrafted URLs to the system. The attacker would need to be logged in tothe system to exploit this vulnerability. An exploit couldallow the attacker to access More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150916-CVE-2015-4305?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Prime%20Collaboration%20Assurance%20Information%20Disclosure |
|