Cisco Application Extension Platform CVE-2010-1572 Remote Privilege Escalation Vulnerability

Bugtraq ID:	40682
Class:	Access Validation Error
CVE:	CVE-2010-1572
Remote:	Yes
Local:	No
Published:	Jun 09 2010 12:00AM
Updated:	Jun 09 2010 12:00AM
Credit:	n.runs AG
Vulnerable:	Cisco Application Extension Platform 1.1.5 Cisco Application Extension Platform 1.1
Not Vulnerable:	Cisco Application Extension Platform 1.1.7

Cisco Application Extension Platform CVE-2010-1572 Remote Privilege Escalation Vulnerability

Cisco Application Extension Platform (AXP) is prone to a remote privilege-escalation vulnerability. This issue is tracked by Cisco Bug ID CSCtb65413.

An authenticated attacker can exploit this issue to gain administrative access to the affected application. This may lead to a full compromise of the affected computer or aid in further attacks.

The following are vulnerable:

Cisco Application Extension Platform 1.1
Cisco Application Extension Platform 1.1.5 (when upgraded from 1.1)

Cisco Application Extension Platform CVE-2010-1572 Remote Privilege Escalation Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco Application Extension Platform CVE-2010-1572 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Application Extension Platform CVE-2010-1572 Remote Privilege Escalation Vulnerability

References:

• Cisco Application Extension Platform Homepage (Cisco)
  
• Cisco Application Extension Platform Privilege Escalation Vulnerability (Cisco)