VulnerabilityModified
CVE-2017-3869
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user.
MEDIUM 5.4EPSS 0.96%
Does this matter?
Lower severity and a low EPSS score (0.96%). Track it; it rarely justifies an emergency change on its own.
Description
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases: 3.1(1) 3.1(1).
- CVSS 3.0
- 5.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- EPSS
- 0.96% probability · 60th percentile
- CISA KEV
- Not listed
- Affected
- cisco/prime infrastructure
- Source
- psirt@cisco.com
References
- http://www.securityfocus.com/bid/96931Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038048
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpiVendor Advisory
- http://www.securityfocus.com/bid/96931Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038048
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpiVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.