CVE-2016-1290

NONE EPSS 71.0%
Published Apr 6, 201610y ago · Modified Jun 17, 20262w ago
Find Similar
Published Apr 6, 2016 10y ago
Last Modified Jun 17, 2026 2w ago

Description

The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.

Threat Intelligence

EPSS Exploit Probability
71.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-264

Affected Products 14

VendorProductVersionRange
ciscoevolved_programmable_network_manager1.2.0any
ciscoprime_infrastructure1.2any
ciscoprime_infrastructure1.2.0.103any
ciscoprime_infrastructure1.2.1any
ciscoprime_infrastructure1.3any
ciscoprime_infrastructure1.3.0.20any
ciscoprime_infrastructure1.4any
ciscoprime_infrastructure1.4.0.45any
ciscoprime_infrastructure1.4.1any
ciscoprime_infrastructure1.4.2any
ciscoprime_infrastructure2.0any
ciscoprime_infrastructure2.1.0any
ciscoprime_infrastructure2.2any
sunopensolarissnv_124any

References 2

  • tools.cisco.com http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-privauth
    Vendor Advisory
  • securitytracker.com http://www.securitytracker.com/id/1035498

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.