VulnerabilityModified
CVE-2014-2152
Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun21868.
MEDIUM 6.8EPSS 0.98%
Does this matter?
Lower severity and a low EPSS score (0.98%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun21868.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.98% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- cisco/prime infrastructure
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2152Vendor Advisory
- http://www.securityfocus.com/bid/72558
- http://www.securitytracker.com/id/1031715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100747
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2152Vendor Advisory
- http://www.securityfocus.com/bid/72558
- http://www.securitytracker.com/id/1031715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100747
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.