SB2017062206 - Multiple vulnerabilities in Cisco Prime Collaboration Provisioning 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017062206

SB2017062206 - Multiple vulnerabilities in Cisco Prime Collaboration Provisioning

Published: June 22, 2017

Security Bulletin ID SB2017062206
Severity
Low
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Information disclosure (CVE-ID: CVE-2017-6706)

The vulnerability allows a local unauthenticated attacker to obtain potentially sensitive information.

The weakness exists in the logging subsystem of the Cisco Prime Collaboration Provisioning tool due to an error when logging sensitive details of specific user actions. A local attacker can access specific system log files on the system.

Successful exploitation of the vulnerability results in information disclosure.

2) Information disclosure (CVE-ID: CVE-2017-6705)

The vulnerability allows a local authenticated attacker to obtain potentially sensitive information.

The weakness exists in the filesystem of the Cisco Prime Collaboration Provisioning tool due to insecure file permissions. A local attacker can access arbitrary files on the system.

Successful exploitation of the vulnerability results in information disclosure.

3) Information disclosure (CVE-ID: CVE-2017-6704)

The vulnerability allows a remote authenticated attacker to obtain potentially sensitive information.

The weakness exists in the web application in the Cisco Prime Collaboration Provisioning tool due to insufficient input validation. A remote attacker can perform arbitrary file downloads and read arbitrary files from the underlying filesystem.

Successful exploitation of the vulnerability results in information disclosure.

4) Session hijacking (CVE-ID: CVE-2017-6703)

The vulnerability allows a remote unauthenticated user to hijack the target user's session.

The weakness exists in the web application in the Cisco Prime Collaboration Provisioning tool due to insufficient session management during user authentication. A remote attacker can perform a session fixation attack against the web application.

Successful exploitation of the vulnerability leads to session steal.

Remediation

Install update from vendor's website.

References