CVE-2019-1662
Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability
- State
- Published
- Severity
- 8.2 High
- Published
- Feb 21, 2019
- Updated
- Nov 19, 2024
- Reserved
- Dec 6, 2018
Description
A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the QOVR service with a valid username. A successful exploit could allow the attacker to perform actions with the privileges of the user that is used for access. This vulnerability affects Cisco PCA Software Releases prior to 12.1 SP2.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 8.2 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Prime Collaboration AssuranceCisco |
|
References
- 107096vdb-entry
- 20190220 Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerabilityvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.