Cisco Prime Data Center Network Manager (DCNM) Default Account Authentication Bypass Vulnerability
BID:98937
Info
Cisco Prime Data Center Network Manager (DCNM) Default Account Authentication Bypass Vulnerability
| Bugtraq ID: | 98937 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-6640 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2017 12:00AM |
| Updated: | Jun 07 2017 12:00AM |
| Credit: | Antonius Mulder |
| Vulnerable: |
Cisco Prime Data Center Network Manager 5.2.2 Cisco Prime Data Center Network Manager 8.0(1) Cisco Prime Data Center Network Manager 6.3(2) Cisco Prime Data Center Network Manager 6.3(1) Cisco Prime Data Center Network Manager 6.2(5a) Cisco Prime Data Center Network Manager 6.2(5) Cisco Prime Data Center Network Manager 6.2(3) Cisco Prime Data Center Network Manager 6.2(2) Cisco Prime Data Center Network Manager 6.2(1) Cisco Prime Data Center Network Manager 6.1(2) Cisco Prime Data Center Network Manager 6.1(1B) Cisco Prime Data Center Network Manager 6.1(1A) Cisco Prime Data Center Network Manager 6.1(1) Cisco Prime Data Center Network Manager 6.1 Cisco Prime Data Center Network Manager 5.2(2e) Cisco Prime Data Center Network Manager 5.2(2c) Cisco Prime Data Center Network Manager 5.2(2b) Cisco Prime Data Center Network Manager 5.2(2a) Cisco Prime Data Center Network Manager 5.2(2) Cisco Prime Data Center Network Manager 5.2(1) Cisco Prime Data Center Network Manager 5.2 Cisco Prime Data Center Network Manager 5.1(3u) Cisco Prime Data Center Network Manager 5.1(2) Cisco Prime Data Center Network Manager 5.1(1) Cisco Prime Data Center Network Manager 5.1 Cisco Prime Data Center Network Manager 5.0(3) Cisco Prime Data Center Network Manager 5.0(2) Cisco Prime Data Center Network Manager 5.0 Cisco Prime Data Center Network Manager 4.2.(3) Cisco Prime Data Center Network Manager 4.2(3) Cisco Prime Data Center Network Manager 4.2(1) Cisco Prime Data Center Network Manager 4.2 Cisco Prime Data Center Network Manager 4.1(5) Cisco Prime Data Center Network Manager 4.1(4) Cisco Prime Data Center Network Manager 4.1(2) Cisco Prime Data Center Network Manager 4.1 Cisco MDS 9500 Series Multilayer Directors 10.1(1.19) Cisco MDS 9500 Series Multilayer Directors 10.0(1.1) |
| Not Vulnerable: |
Cisco Prime Data Center Network Manager 10.2(1) Cisco MDS 9500 Series Multilayer Directors 10.1(1.254)S0 |
Discussion
Cisco Prime Data Center Network Manager (DCNM) Default Account Authentication Bypass Vulnerability
Cisco Prime Data Center Network Manager (DCNM) is prone to an authentication-bypass vulnerability.
Successful attacks can allow an attackers to obtain sensitive information, bypass certain security restrictions, perform unauthorized administrative actions and gain access to the affected application with elevated privileges.
This issue is being tracked by Cisco Bug ID CSCvd95346.
Versions prior to Cisco Prime Data Center Network Manager (DCNM) 10.2(1) are vulnerable.
Cisco Prime Data Center Network Manager (DCNM) is prone to an authentication-bypass vulnerability.
Successful attacks can allow an attackers to obtain sensitive information, bypass certain security restrictions, perform unauthorized administrative actions and gain access to the affected application with elevated privileges.
This issue is being tracked by Cisco Bug ID CSCvd95346.
Versions prior to Cisco Prime Data Center Network Manager (DCNM) 10.2(1) are vulnerable.
Solution / Fix
Cisco Prime Data Center Network Manager (DCNM) Default Account Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Prime Data Center Network Manager (DCNM) Default Account Authentication Bypass Vulnerability
References:
References: