Unscored CVE-2013-3473 EUVD-2013-3408GHSA-r9fp-qw2c-8cxh

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the exi…

Published Sep 20, 2013 · Updated Sep 17, 2024 · Assigned by cisco

Description

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.

References

20130918 Cisco Prime Central for Hosted Collaboration Solution Assurance Unauthenticated Username and Password Enumeration Vulnerability vendor-advisory