CVE-2017-6636

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...

CVE-2017-6637

Cisco Prime Collaboration Provisioning (PCP) web interface vulnerability CVE-2017-6637 allows an authenticated, remote attacker to delete arbitrary files due to insufficient HTTP request input validation and lack of RBAC enforcement, via directory traversal on the affected system. Core issue: imp...

CVE-2017-6635

CVE-2017-6635 affects Cisco Prime Collaboration Provisioning Software (before Release 12.1). The web interface allows authenticated, remote attackers to delete arbitrary files via crafted HTTP requests that exploit directory traversal and weak RBAC enforcement. The issue is rooted in insufficient...

CVE-2017-6635

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 12.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...

Cisco Prime Collaboration Provisioning Directory Traversal Vulnerability (CNVD-2017-09962)

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A directory traversal vulnerability exists in Cisco Prime Collaboration Provisioning, which can be exploited by a remote attacker to delete arbitrary files on an affected system...

PT-2017-17205

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 11.1 Description The issue allows an authenticated, remote attacker to view any file on an affected system due to improper input validation of HTTP requests and the failure to...

Cisco Prime Collaboration Provisioning Directory Traversal Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A directory traversal vulnerability in the web interface of Cisco Prime Collaboration Provisioning can be exploited by an authenticated, remote attacker to view arbitrary files on an affected...

CVE-2017-6636: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...

PT-2017-17204

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 12.1 Description The issue arises from the software's failure to properly validate HTTP request inputs and apply role-based access controls RBACs to requested HTTP URLs. This...

PT-2017-17206

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 11.1 Description The issue arises from improper input validation of HTTP requests and the lack of role-based access controls RBACs applied to requested HTTP URLs in the web...

Cisco Prime Collaboration Provisioning Directory Traversal Arbitrary File Deletion Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A directory traversal arbitrary file deletion vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning, which can be exploited by an authenticated, remote attacker to...

CVE-2017-6635: Missing Authorization

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 12.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...

CVE-2017-6637: Improper Input Validation

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...

Cisco Prime Collaboration Provisioning < 12.1 Multiple Vulnerabilities (cisco-sa-20170517-pcp1 - cisco-sa-20170517-pcp3)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is 9.x, 10.x, 11.x, or 12.x prior to 12.1. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the web interface when handling HTTP...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Cisco Prime Collaboration Provisioning Authentication Bypass Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. An authentication bypass vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning, which stems from a lack of security restrictions in certain HTTP request methods. An...

Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. An information disclosure vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning that stems from a lack of security restrictions in certain HTTP request methods. An...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insufficient protection of...

CVE-2017-6622

A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain HTTP request methods,...

CVE-2017-6621

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insufficient protection of...