Unscored CVE-2015-4307 EUVD-2015-4330GHSA-rjh7-24vr-w43c

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restric…

Published Sep 20, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.

References

1033579 vdb-entry
20150916 Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability vendor-advisory