NVD

Id
17773  
Name
CVE-2016-1360  
Description
Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers" installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390.  
Reject
 
CVSS Version
2  
CVSS Score
3  
Severity
Low  
CVSS Base Score
3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-03-11  
Modified Date
2016-12-02  
Seq
2016-1360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97691 17773 CVE-2016-1360 20160310 Cisco Prime LAN Management Solution Default Decryption Key Vulnerability  View
97692 17773 CVE-2016-1360 1035313  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1046 JVNDB-2016-001819 Cisco Prime LAN Management Solution における平文データを取得される脆弱性 Cisco Prime LAN Management Solution (LMS) は、異なるカスタマのインストールに同一のデータベース復号キーを使用するため、平文データを取得される脆弱性が存在します。 CVE-2016-1360 87866 CVE-2016-1360 17773 3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001819.html 2016-03-10 2016-03-23 View