Vulnerability Details CVE-2017-3869
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases: 3.1(1) 3.1(1).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.6%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 5.5
References
- http://www.securityfocus.com/bid/96931
- http://www.securitytracker.com/id/1038048
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi
- http://www.securityfocus.com/bid/96931
- http://www.securitytracker.com/id/1038048
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi
Products affected by CVE-2017-3869
-
cpe:2.3:a:cisco:prime_infrastructure:3.1(1)