CVE-2015-4331

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-08-22 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.

Affected products

Cisco Prime Infrastructure: through 1.4.0.45

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=40553
http://www.securitytracker.com/id/1033356
http://tools.cisco.com/security/center/viewAlert.x?alertId=40553
http://www.securitytracker.com/id/1033356

Get alerted when CVE-2015-4331 or the next vulnerability affects your stack