Skip to content
CVE Tracker
Back

CVE-2018-0096

A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote…

Medium5.9EPSS 1.4%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to perform a privilege escalation in which one virtual domain user can view and modify another virtual domain configuration. The vulnerability is due to a failure to properly enforce RBAC for virtual domains. An attacker could exploit this vulnerability by sending an authenticated, crafted HTTP request to a targeted application. An exploit could allow the attacker to bypass RBAC policies on the targeted system to modify a virtual domain and access resources that are not normally accessible. Cisco Bug IDs: CSCvg36875.

Scores

CVSS scores of CVE-2018-0096, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium5.9CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS (exploitation in 30 days)
1.4% · top 28% of all CVEs (4 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.9.

Weakness

Affected products

  • Cisco Prime Infrastructure

    • affected Cisco Prime Infrastructure

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2018-0096 badge
[![CVE-2018-0096](https://trackcve.app/badge/CVE-2018-0096.svg)](https://trackcve.app/cve/CVE-2018-0096)

Record last updated .