Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2016-1301

The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.

  • Published: Feb 7, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-1301
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 8.5
  • AV:N/AC:M/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
cisco / asa_cx_context-aware_security_software 9.1.3-8 9.1.3-8.x
cisco / prime_security_manager 9.0.2-68 9.0.2-68.x
cisco / prime_security_manager 9.0.0 9.0.0.x
cisco / asa_cx_context-aware_security_software 9.2.1-2 9.2.1-2.x
cisco / asa_cx_context-aware_security_software 9.1.2-29 9.1.2-29.x
cisco / asa_cx_context-aware_security_software 9.2.1-4 9.2.1-4.x
cisco / prime_security_manager 9.2.0 9.2.0.x
cisco / asa_cx_context-aware_security_software 9.0.2-68 9.0.2-68.x
cisco / asa_cx_context-aware_security_software 9.2.1-1 9.2.1-1.x
cisco / prime_security_manager 9.1.2-29 9.1.2-29.x
cisco / prime_security_manager 9.1.3-13 9.1.3-13.x
cisco / prime_security_manager 9.1.2-42 9.1.2-42.x
cisco / asa_cx_context-aware_security_software 9.0.2 9.0.2.x
cisco / prime_security_manager 9.0.1-40 9.0.1-40.x
cisco / asa_cx_context-aware_security_software 9.0_base 9.0_base.x
cisco / prime_security_manager 9.2.1-2 9.2.1-2.x
cisco / asa_cx_context-aware_security_software 9.0.1-40 9.0.1-40.x
cisco / prime_security_manager 9.1.3-10 9.1.3-10.x
cisco / asa_cx_context-aware_security_software 9.1.2-42 9.1.2-42.x
cisco / asa_cx_context-aware_security_software 9.0.1 9.0.1.x
cisco / asa_cx_context-aware_security_software 9.1.3-10 9.1.3-10.x
cisco / prime_security_manager 9.1.0 9.1.0.x
cisco / asa_cx_context-aware_security_software 9.1.3-13 9.1.3-13.x
cisco / prime_security_manager 9.2.1-1 9.2.1-1.x
cisco / asa_cx_context-aware_security_software 9.2.1-3 9.2.1-3.x
cisco / prime_security_manager 9.1.3-8 9.1.3-8.x