NetSight
high7.1

CVE-2016-1360

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local use…

Impact

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390.

Affected products

VendorProductAffected versions
CiscoPrime Lan Management Solution
Versions 4.1_base, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5

Weakness classification

References