NVD

Id
21200  
Name
CVE-2016-6426  
Description
The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-10-05  
Modified Date
2016-11-28  
Seq
2016-6426  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
115225 21200 CVE-2016-6426 20161005 Cisco Unified Intelligence Center (CUIC) Software Unauthenticated User Account Creation Vulnerability  View
115226 21200 CVE-2016-6426 93420  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4390 JVNDB-2016-005163 Cisco Unified Contact Center Express で使用される Unified Intelligence Center におけるユーザアカウントを作成される脆弱性 Cisco Unified Contact Center Express で使用される Unified Intelligence Center (CUIC) の j_spring_security_switch_user 関数には、ユーザアカウントを作成される脆弱性が存在します。 CVE-2016-6426 92933 CVE-2016-6426 21200 4.3 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005163.html 2016-10-05 2016-10-13 View