| Package | Affected versions | Patched versions |
|---|---|---|
| prime collaboration assurance | = 10.0.0= 10.5.0= 10.5.1= 10.6.0= 9.0.0= 9.5.0 |
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free