← Back to CVEs
CVE-2017-12225
N/ADescription
A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability. The vulnerability is due to the reuse of a preauthentication session token as part of the postauthentication session. An attacker could exploit this vulnerability by obtaining the presession token ID. An exploit could allow an attacker to hijack an existing user's session. Known Affected Releases 4.2(5). Cisco Bug IDs: CSCvf58392.
CVE Details
CVSS v3.1 ScoreN/A
Published9/7/2017
Last Modified4/20/2025
Sourcenvd
Honeypot Sightings0
Affected Products
cisco:prime_lan_management_solution
Weaknesses (CWE)
CWE-287CWE-384
References
http://www.securitytracker.com/id/1039285(psirt@cisco.com)
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392(psirt@cisco.com)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms(psirt@cisco.com)
http://www.securitytracker.com/id/1039285(af854a3a-2127-422b-91ae-364da2661108)
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392(af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.