CVE-2016-1360

Published Mar 12, 2016

Last updated a month ago

Overview

Description
Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390.
Source
psirt@cisco.com
NVD status
Deferred

Risk scores

CVSS 3.0

Type
Primary
Base score
7.1
Impact score
5.2
Exploitability score
1.8
Vector string
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
3
Impact score
4.9
Exploitability score
2.7
Vector string
AV:L/AC:M/Au:S/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-200

Social media

Hype score
Not currently trending

Configurations