PT-2015-7219 · Cisco · Cisco Prime Collaboration Assurance
CVE-2015-6389
·
Publicado
2015-12-13
·
Atualizado
2016-12-07
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Prime Collaboration Assurance versions prior to 11.0
Description
The issue allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of a hardcoded account's password.
Recommendations
For versions prior to 11.0, update to version 11.0 or later to resolve the issue. As a temporary workaround, consider restricting SSH access to minimize the risk of exploitation.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Prime Collaboration Assurance