CVE-2015-6389

Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.

Score

CVSS 2.0 9.0 Critical

Status

Modified - psirt@cisco.com

Published

2015-12-13

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Prime Collaboration Assurance (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca
• http://www.securityfocus.com/bid/78738
• http://www.securitytracker.com/id/1034361