Test Kennung:	1.3.6.1.4.1.25623.1.0.106327
Kategorie:	CISCO
Titel:	Cisco Prime Infrastructure Authentication Bypass API Vulnerability
Zusammenfassung:	A vulnerability in the application programming interface (API) of Cisco;Prime Infrastructure could allow an unauthenticated, remote attacker to access and control the API resources.
Beschreibung:	Summary: A vulnerability in the application programming interface (API) of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to access and control the API resources. Vulnerability Insight: The vulnerability is due to improper input validation of HTTP requests for unauthenticated URIs. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected URIs. Vulnerability Impact: Successful exploitation of this vulnerability could allow the attacker to upload malicious code to the application server or read unauthorized management data, such as credentials of devices managed by Cisco Prime Infrastructure. Affected Software/OS: Cisco Prime Infrastructure software versions 1.2 through version 3.0. Solution: Upgrade to version 2.2.3 Update 4, 3.0.3 Update 2, or later CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1289 BugTraq ID: 91504 http://www.securityfocus.com/bid/91504 Cisco Security Advisory: 20160629 Cisco Prime Infrastructure and Evolved Programmable Network Manager Authentication Bypass API Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-piauthbypass http://www.securitytracker.com/id/1036195
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.