Privilege Escalation in Cisco Connected Grid Network Management System
CVE-2015-6362

Currently unrated

Key Information:

Vendor

Cisco
Status
Connected Grid Network Management System
Vendor
CVE Published:
10 November 2015

What is CVE-2015-6362?

The vulnerability in the web GUI of Cisco Connected Grid Network Management System versions 3.0(0.35) and 3.0(0.54) allows remote authenticated users with the Monitor-Only role to bypass access restrictions. This exploitation can result in unauthorized configuration modifications, compromising the integrity of network management practices.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1034106
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.