[SECURITY] Fedora 26 Update: subversion-1.9.6-2.fc26

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

PT-2017-17294

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP Tool version 12.1 Description A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning PCP Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting...

CVE-2017-6755: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning PCP Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc90312. Known Affected Releases:...

Cisco Prime Collaboration Provisioning ScriptMgr Authentication Bypass (CVE-2017-6622)

An authentication bypass vulnerability has been reported in Cisco Prime Collaboration Provisioning. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ScriptMgr servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending ...

Cisco Prime Collaboration Provisioning Tool Web Portal Cross-Site Scripting Vulnerability

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning PCP Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

Cisco Prime Collaboration Provisioning Tool Web Portal Cross-Site Scripting Vulnerability

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning PCP Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validatio...

How to Become a Master Threat Hunter

Editor’s Note: The text appears in the free eBook: “Threat Hunting for Dummies.” After you’ve been threat hunting in an environment forsix months, a year, or more, you’re going to become a senior in most circles. You’re expanding your skills and knowledge, you’re building and using tools, and...

Cisco Prime Collaboration Provisioning licensestatus.jsp Arbitrary File Deletion (CVE-2017-6635)

An arbitrary file deletion exists in Cisco Prime Collaboration Provisioning. The vulnerability is due to insufficient validation on user-supplied paths before using them in file operations. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the targe...

Cisco Prime Collaboration Provisioning ScriptMgr Servlet Authentication Bypass RCE

The remote Cisco Prime Collaboration Provisioning server is affected by a remote command execution vulnerability in the ScriptMgr servlet due to a failure to restrict the HTTP HEAD method. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands...

Remediation Workflow Now Integrates with ServiceNow

Today were sharing an update to Remediation Workflow Ticketing capabilities. We are pleased to announce that Remediation Workflow in InsightVM now integrates with ServiceNow. One of the main benefits of Remediation Workflow Ticketing is to improve collaboration between security and remediation...

CVE-2017-6705

A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1...

CVE-2017-6706

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...

CVE-2017-6703

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1...

CVE-2017-6705

A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1...

PT-2017-17260

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning tool version 12.1 Description A vulnerability in the logging subsystem could allow an unauthenticated, local attacker to acquire sensitive information. Recommendations For version 12.1, update to a versio...

CVE-2017-6706: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1...

PT-2017-17257

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning tool version 12.1 Description A vulnerability in the web application could allow an unauthenticated, remote attacker to hijack another user's session. Recommendations For version 12.1, update to a version...

CVE-2017-6705: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1...

CVE-2017-6705

The CVE-2017-6705 issue affects the Cisco Prime Collaboration Provisioning Tool. Affected component: the filesystem; root cause is insecure file permissions. Impact: an authenticated, local attacker can disclose sensitive information. Known affected release: 12.1. The Cisco advisory states there ...