8.8
High
CVE-2019-1874 A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an…
Description
A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protection mechanisms on the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Prime Service Catalog | Versions not published |
References
- 20190619 Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability tools.cisco.com
- 108861 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Prime Service Catalog
The 4 CVEs of Cisco Prime Service Catalog →
CVE-2022-20680
A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated,…
4.3
Medium
CVE-2019-1875
A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated,…
4.8
Medium
CVE-2018-15451
A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated,…
5.4
Medium