CVE-2015-0768 | BDVDB-2026-69866 Detail

Description#

The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/viewAlert.x?alertId=39192
http://www.securitytracker.com/id/1032541

Exploit#

No public exploit known

History#

Version 12015-06-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.