« Volver al listado

CVE-2015-6395

Estado: ModificadaMedia (6.5)—

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Prime Service Catalog

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6395",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-12-12T11:59:00.120",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151207-psc",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034313",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151207-psc",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034313",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188."
    },
    {
      "lang": "es",
      "value": "Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1 y 11.0 no restringe adecuadamente el acceso a páginas web, lo que permite a atacantes remotos modificar la configuración a través de una petición directa, también conocido como Bug ID CSCuw48188."
    }
  ],
  "lastModified": "2026-06-17T00:30:49.373",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:prime_service_catalog:10.0\\(r2\\)_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFB4B497-7E1F-457E-9DF6-BCD7B528D931"
            },
            {
              "criteria": "cpe:2.3:a:cisco:prime_service_catalog:10.0_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F2A5436-B07B-487C-AD58-9178D3252441"
            },
            {
              "criteria": "cpe:2.3:a:cisco:prime_service_catalog:10.1_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D579B303-6D0C-4BFA-8E3C-83794107AC31"
            },
            {
              "criteria": "cpe:2.3:a:cisco:prime_service_catalog:11.0_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C372575-6DFC-43E9-8782-806B7B3E7859"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}