Not rated
CVE-2017-6759 A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an…
Description
A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by triggering the upgrade package installation functionality. Cisco Bug IDs: CSCvc90304.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Prime Collaboration Provisioning Tool | Versions not published |
References
- tools.cisco.com tools.cisco.com
- 1039062 www.securitytracker.com
- quickview.cloudapps.cisco.com quickview.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Prime Collaboration Provisioning Tool
The 11 CVEs of Cisco Prime Collaboration Provisioning Tool →
CVE-2018-0205
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated
CVE-2018-0204
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated,…
Not rated
CVE-2017-6793
A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated
CVE-2017-6792
A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated