Unscored CVE-2015-6362 EUVD-2015-6304GHSA-wh7v-9p3v-c89w

The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass …

Published Nov 10, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54) allows remote authenticated users to bypass intended access restrictions and modify the configuration by leveraging the Monitor-Only role, aka Bug ID CSCuw42640.

References

20151109 Cisco Connected Grid Network Management System Privilege Escalation Vulnerability vendor-advisory
1034106 vdb-entry