Description
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.
References
- 1034927 vdb-entry
- 1034926 vdb-entry
- 20160203 Cisco ASA-CX and Cisco Prime Security Manager Privilege Escalation Vulnerability vendor-advisory