CVE-2015-6389

Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:C

Exploitability : 10.0 / Impact : 8.5

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca	Vendor Advisory
http://www.securityfocus.com/bid/78738
http://www.securitytracker.com/id/1034361
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca	Vendor Advisory
http://www.securityfocus.com/bid/78738
http://www.securitytracker.com/id/1034361

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:prime_collaboration_assurance:10.5.1:::::::*
	cpe:2.3:a:cisco:prime_collaboration_assurance:10.6.0:::::::*

History

21 Nov 2024, 02:34

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/78738 -~~	() http://www.securityfocus.com/bid/78738 -
References	~~() http://www.securitytracker.com/id/1034361 -~~	() http://www.securitytracker.com/id/1034361 -

Information

Published : 2015-12-13 03:59

Updated : 2024-11-21 02:34

NVD link : CVE-2015-6389

Mitre link : CVE-2015-6389

CVE.ORG link : CVE-2015-6389

JSON object : View

Products Affected

cisco

prime_collaboration_assurance

CWE

CWE-287

Improper Authentication

{"id": "CVE-2015-6389", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 8.5, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-12-13T03:59:01.517", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/78738", "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1034361", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/78738", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1034361", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707."}, {"lang": "es", "value": "Cisco Prime Collaboration Assurance en versiones anteriores a 11.0 tiene una cuenta cmuser embebida, lo que permite a atacantes remotos obtener acceso estableciendo una sesi\u00f3n SSH aprovechando el conocimiento de la contrase\u00f1a de esas cuentas, tambi\u00e9n conocido como Bug ID CSCus62707."}], "lastModified": "2024-11-21T02:34:54.473", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:prime_collaboration_assurance:10.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7BC51A3-C6B9-43F3-B742-4925A9DFEDDC"}, {"criteria": "cpe:2.3:a:cisco:prime_collaboration_assurance:10.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF979F82-4761-45D7-A1A1-44F0B3C8CFD1"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}