Логотип exploitDog
bind:CVE-2018-15389
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-15389

Количество 3

Количество 3

nvd логотип

CVE-2018-15389

больше 7 лет назад

A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded password that, in some cases, is not replaced with a unique password. A successful exploit could allow the attacker to access the administrative web interface with administrator-level privileges.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-gpf3-w2vw-2vqg

больше 3 лет назад

A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded password that, in some cases, is not replaced with a unique password. A successful exploit could allow the attacker to access the administrative web interface with administrator-level privileges.

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2018-01581

больше 7 лет назад

Уязвимость компонента установки программного средства Cisco Prime Collaboration Provisioning для централизованного управления продуктами Cisco, позволяющая нарушителю получить доступ к административному веб-интерфейсу с правами администратора

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2018-15389

A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded password that, in some cases, is not replaced with a unique password. A successful exploit could allow the attacker to access the administrative web interface with administrator-level privileges.

CVSS3: 9.8
1%
Низкий
больше 7 лет назад
github логотип
GHSA-gpf3-w2vw-2vqg

A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded password that, in some cases, is not replaced with a unique password. A successful exploit could allow the attacker to access the administrative web interface with administrator-level privileges.

CVSS3: 9.8
1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2018-01581

Уязвимость компонента установки программного средства Cisco Prime Collaboration Provisioning для централизованного управления продуктами Cisco, позволяющая нарушителю получить доступ к административному веб-интерфейсу с правами администратора

CVSS3: 8.1
1%
Низкий
больше 7 лет назад

Уязвимостей на страницу