Vulnerability Description
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Prime Infrastructure | <= 1.4.0.45 |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=40553Vendor Advisory
- http://www.securitytracker.com/id/1033356Third Party AdvisoryVDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=40553Vendor Advisory
- http://www.securitytracker.com/id/1033356Third Party AdvisoryVDB Entry
FAQ
What is CVE-2015-4331?
CVE-2015-4331 is a vulnerability with a CVSS score of 3.5 (LOW). Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composit...
How severe is CVE-2015-4331?
CVE-2015-4331 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-4331?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Prime Infrastructure.