SB2017090709 - Session hijacking in Cisco Prime LAN Management Solution
Published: September 7, 2017
Security Bulletin ID
SB2017090709
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Session hijacking (CVE-ID: CVE-2017-12225)
CWE-ID: CWE-384 - Session Fixation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a remote authenticated attacker to perform session fixation attack on the target system.
The weakness exists in the web functionality of the Cisco Prime LAN Management Solution due to the reuse of a preauthentication session token as part of the postauthentication session. A remote attacker can obtain the presession token ID and hijack an existing user's session.
Remediation
Install update from vendor's website.