CWE Code: 863
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Incorrect Authorization
Summary: a vulnerability in the role-based access control (rbac) functionality of cisco prime infrastructure could allow an authenticated, remote attacker to perform a privilege escalation in which one virtual domain user can view and modify another virtual domain configuration. the vulnerability is due to a failure to properly enforce rbac for virtual domains. an attacker could exploit this vulnerability by sending an authenticated, crafted http request to a targeted application. an exploit could allow the attacker to bypass rbac policies on the targeted system to modify a virtual domain and access resources that are not normally accessible. cisco bug ids: cscvg36875.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2018-01-18
Last Modified Date: 2019-10-09