Cisco Prime Network Control Systems CVE-2013-1170 Security Bypass Vulnerability

Bugtraq ID:	59013
Class:	Design Error
CVE:	CVE-2013-1170
Remote:	Yes
Local:	No
Published:	Apr 10 2013 12:00AM
Updated:	Apr 10 2013 12:00AM
Credit:	Erik Parker of Amazon
Vulnerable:
Not Vulnerable:

Cisco Prime Network Control Systems CVE-2013-1170 Security Bypass Vulnerability

Cisco Prime Network Control Systems is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.

This issue is tracked by Cisco Bug ID CSCtz30468.

Cisco Prime Network Control Systems CVE-2013-1170 Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Cisco Prime Network Control Systems CVE-2013-1170 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Prime Network Control Systems CVE-2013-1170 Security Bypass Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Prime Network Control Systems Database Default Credentials Vulnerability (Cisco Systems)