CVE-2017-12225

{"id": "CVE-2017-12225", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2017-09-07T21:29:00.597", "references": [{"url": "http://www.securitytracker.com/id/1039285", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf58392", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-prime-lms", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-384"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability. The vulnerability is due to the reuse of a preauthentication session token as part of the postauthentication session. An attacker could exploit this vulnerability by obtaining the presession token ID. An exploit could allow an attacker to hijack an existing user's session. Known Affected Releases 4.2(5). Cisco Bug IDs: CSCvf58392."}, {"lang": "es", "value": "Una vulnerabilidad en la funcionalidad web de Cisco Prime LAN Management Solution podr\u00eda permitir que un atacante remoto autenticado secuestre la sesi\u00f3n administrativa de otro usuario. Esto tambi\u00e9n se conoce como vulnerabilidad de fijaci\u00f3n de sesi\u00f3n. Esta vulnerabilidad se debe a la reutilizaci\u00f3n de un token de la sesi\u00f3n de preautenticaci\u00f3n como parte de la sesi\u00f3n de postautenticaci\u00f3n. Un atacante podr\u00eda explotar esta vulnerabilidad obteniendo el ID del token de presesi\u00f3n. Si se explota esta vulnerabilidad, un atacante podr\u00eda secuestrar la sesi\u00f3n de un usuario. Versiones afectadas conocidas 4.2(5): Cisco Bug IDs: CSCvf58392."}], "lastModified": "2019-10-09T23:22:30.933", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:prime_lan_management_solution:4.2\\(5\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAF17DFC-F732-4A4D-86A9-03E67A01D61B"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}