← Retour aux CVEs

CVE-2017-12225

N/A

Description

A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability. The vulnerability is due to the reuse of a preauthentication session token as part of the postauthentication session. An attacker could exploit this vulnerability by obtaining the presession token ID. An exploit could allow an attacker to hijack an existing user's session. Known Affected Releases 4.2(5). Cisco Bug IDs: CSCvf58392.

Details CVE

Score CVSS v3.1N/A

Publie9/7/2017

Derniere modification4/20/2025

Sourcenvd

Observations honeypot0

Produits affectes

cisco:prime_lan_management_solution

Faiblesses (CWE)

CWE-287CWE-384

References

http://www.securitytracker.com/id/1039285(psirt@cisco.com)

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms(psirt@cisco.com)

http://www.securitytracker.com/id/1039285(af854a3a-2127-422b-91ae-364da2661108)

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.