CVE-2015-4306

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.

• CWE-264

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pcaVendor Advisory
• http://www.securitytracker.com/id/1033581Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pcaVendor Advisory
• http://www.securitytracker.com/id/1033581Third Party Advisory, VDB Entry

Published

Sep 20, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4300Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-4301Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote aut…
• CVE-2015-4302The web interface in Cisco FireSIGHT Management Center 5.3.1…
• CVE-2015-4303Cisco TelePresence Video Communication Server (VCS) X8.5.2 a…
• CVE-2015-4304The web framework in Cisco Prime Collaboration Assurance bef…
• CVE-2015-4305The web framework in Cisco Prime Collaboration Assurance bef…
• CVE-2015-4307The web framework in Cisco Prime Collaboration Provisioning …
• CVE-2015-4308The webGUI configuration-export feature in Cisco Edge Bluebi…
• CVE-2015-4310Multiple cross-site scripting (XSS) vulnerabilities in Cisco…
• CVE-2015-4314The System Snapshot feature in Cisco TelePresence Video Comm…
• CVE-2015-4315The Call Policy Configuration page in Cisco TelePresence Vid…
• CVE-2015-4316The Mobile and Remote Access (MRA) endpoint-validation featu…