CVE-2016-1416
9.8
CRITICAL · CVSS 3.0 · EPSS 4.5% (pctl 91)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 4.54% — more likely to be exploited than 91% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2016-07-02 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| cisco | prime collaboration provisioning |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-cpcpauthbypass
- http://www.securityfocus.com/bid/91505
- http://www.securitytracker.com/id/1036212
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160629-cpcpauthbypass
- http://www.securityfocus.com/bid/91505
- http://www.securitytracker.com/id/1036212
→ the Explorer · watch your stack · NVD