cisco prime-infrastructure CVE-2019-1906 is a vulnerability in Cisco Prime Infrastructure
Published on June 20, 2019

Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability
A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by manipulating requests sent to an affected PI server. A successful exploit could allow the attacker to change the virtual domain configuration and possibly elevate privileges.

Vendor Advisory NVD

Weakness Type

Permissions, Privileges, and Access Controls

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.


Products Associated with CVE-2019-1906

Want to know whenever a new CVE is published for Cisco Prime Infrastructure? stack.watch will email you.

Cisco Prime Infrastructure
 

Affected Versions

Cisco Prime Infrastructure Version 3.6(0.0) is affected by CVE-2019-1906

Exploit Probability

EPSS
0.13%
Percentile
32.20%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.