NetSight
IP …
high8.8

CVE-2016-1301

The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112…

Impact

The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.

Affected products

VendorProductAffected versions
CiscoPrime Security Manager
Versions 9.0.0, 9.0.1-40, 9.0.2-68, 9.1.0, 9.1.2-29, 9.1.2-42
CiscoAsa Cx Context-Aware Security Software
Versions 9.0.1, 9.0.1-40, 9.0.2, 9.0.2-68, 9.0_base, 9.1.2-29

Weakness classification

CWE-284

References