VULNERABILITY INTELLIGENCE

CVE-2013-3473

CVSS score7.8 HIGH
EPSS probability1.53%
CISA KEVNot currently listed
Published2013-09-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.

Weakness classification

  • CWE-287: Improper Authentication

Primary references