Not rated
CVE-2017-6756 A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an…
Description
A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of defense against cross-site request forgery (CSRF) attacks. An attacker could exploit this vulnerability by forcing the user's browser to perform any action authorized for that user. Cisco Bug IDs: CSCvc90280.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Prime Collaboration Provisioning Tool | Versions not published |
References
- 100112 www.securityfocus.com
- tools.cisco.com tools.cisco.com
- 1039061 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Prime Collaboration Provisioning Tool
The 11 CVEs of Cisco Prime Collaboration Provisioning Tool →
CVE-2018-0205
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated
CVE-2018-0204
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated,…
Not rated
CVE-2017-6793
A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated
CVE-2017-6792
A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated