Privilege Escalation Vulnerability in Cisco Prime Infrastructure and Evolved Programmable Network Manager

CVE-2016-1406

What is CVE-2016-1406?

The API web interface in specific versions of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager exhibits a vulnerability that allows remote authenticated users to circumvent role-based access control (RBAC) mechanisms. By exploiting crafted JSON data, unauthorized access to sensitive information can be achieved, resulting in potential privilege escalation. This flaw underscores the critical need for rigorous security practices and timely updates to safeguard sensitive data.

References