Cisco Prime Collaboration Assurance CVE-2019-1662 Authentication Bypass Vulnerability

Bugtraq ID:	107096
Class:	Design Error
CVE:	CVE-2019-1662
Remote:	Yes
Local:	No
Published:	Feb 20 2019 12:00AM
Updated:	Feb 20 2019 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Prime Collaboration Assurance 12.1
Not Vulnerable:	Cisco Prime Collaboration Assurance 12.1 SP2

Cisco Prime Collaboration Assurance CVE-2019-1662 Authentication Bypass Vulnerability

Cisco Prime Collaboration Assurance is prone to an authentication bypass vulnerability

An attacker can exploit this issue to bypass the authentication mechanism and gain unauthorized access. This may aid in further attacks.

This issue is being tracked by Cisco Bug ID CSCvj07241.

Cisco PCA versions prior to 12.1 SP2 are vulnerable.

Cisco Prime Collaboration Assurance CVE-2019-1662 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Prime Collaboration Assurance CVE-2019-1662 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Prime Collaboration Assurance CVE-2019-1662 Authentication Bypass Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerabilit (Cisco)