NVD

Id
17705  
Name
CVE-2016-1290  
Description
The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-06  
Modified Date
2016-12-02  
Seq
2016-1290  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97550 17705 CVE-2016-1290 20160406 Cisco Prime Infrastructure and Evolved Programmable Network Manager Privilege Escalation API Vulnerability  View
97551 17705 CVE-2016-1290 1035498  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1176 JVNDB-2016-001949 Cisco Prime Infrastructure および Evolved Programmable Network Manager の Web API における RBAC 制限を回避される脆弱性 Cisco Prime Infrastructure および Evolved Programmable Network Manager (EPNM) の Web API には、RBAC 制限を回避され、権限を取得される脆弱性が存在します。 CVE-2016-1290 87796 CVE-2016-1290 17705 5.5 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001949.html 2016-04-06 2016-04-08 View