Boletines de Vulnerabilidades

Cisco Prime Infrastructure Privilege Escalation Vulnerability


Información sobre el sistema

   
Software afectado Cisco

Descripción

A vulnerability in the Cisco Prime Infrastructure (PI) username storage and authentication process could allow an authenticated, remote attacker to gain elevated privileges on a targeted system.The vulnerability occurs because the affected software saves case-sensitive usernames and performs case-sensitive string comparisons. An attacker could exploit this vulnerability during authentication by entering a username that contains characters in cases different from the combination registered on

More info:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150820-CVE-2015-4331?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Prime%20Infrastructure%20Privilege%20Escalation%20Vulnerabil

Identificadores estándar

Propiedad Valor
CVE CVE-2015-4331.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-10-08

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT