OPENSUSE-SU-2020:0213-1 Security update for pcp

This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed: - Fixed an dependency issue with pcp2csv bsc1129991. This update was imported from the...

Security update for pcp (important)

openSUSE Security Update: Security update for pcp Announcement ID: openSUSE-SU-2020:0213-1 Rating: important References: 1129991 1152763 1153921 Cross-References: CVE-2019-3695 CVE-2019-3696 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is now...

SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0357-1)

This update for pcp fixes the following issues : Security issue fixed : CVE-2019-3696: Fixed a local privilege escalation in migratetempdirs bsc1153921. CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed : Fixed an dependen...

SUSE SLED15 / SLES15 Security Update : pcp (SUSE-SU-2020:0355-1)

This update for pcp fixes the following issues : Security issue fixed : CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed : Fixed an dependency issue with pcp2csv bsc1129991. Note that Tenable Network Security has extracte...

SUSE-SU-2020:0357-1 Security update for pcp

This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3696: Fixed a local privilege escalation in migratetempdirs bsc1153921. - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed: - Fixed an...

SUSE-SU-2020:0356-1 Security update for pcp

This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3696: Fixed a local privilege escalation in migratetempdirs bsc1153921. - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed: - Fixed an...

SUSE-SU-2020:0355-1 Security update for pcp

This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update bsc1152763. Non-security issue fixed: - Fixed an dependency issue with pcp2csv bsc1129991...

PT-2020-2768

Name of the Vulnerable Software and Affected Versions pcp versions prior to 3.11.9-5.8.1 pcp versions prior to 4.3.1-3.5.3 pcp versions prior to 3.11.9-6.14.1 pcp versions prior to 4.3.1-lp151.2.3.1 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory...

PT-2020-2767

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1 SUSE Linux Enterprise Module for Development Tools 15 pcp...

Hardcoded credentials

A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...

CVE-2018-15389

Cisco Prime Collaboration Provisioning (PCP) contains a vulnerability in its install function that allows an unauthenticated, remote attacker to reach the administrative web interface by using a default hard-coded username/password used during install. This can grant administrator-level access. M...

CVE-2018-0391

The CVE-2018-0391 issue affects Cisco Prime Collaboration Provisioning (PCP) prior to 12.3, with the root cause being insufficient validation of a password-change request in the authentication flow. A remote attacker could cause the targeted device to become inoperable, resulting in a DoS conditi...

CVE-2018-0321

A vulnerability in Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation RMI system. The vulnerability is due to an open port in the Network Interface and Configuration Engine NICE service. An attacker could exploit...

CVE-2018-0319

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...

CVE-2018-0319

CVE-2018-0319 affects Cisco Prime Collaboration Provisioning (PCP) Password Recovery. The root cause is insufficient validation of a password recovery request, allowing an unauthenticated remote attacker to submit a recovery request, change the password for any user, and potentially gain administ...

CVE-2018-0322

CVE-2018-0322 affects Cisco Prime Collaboration Provisioning (PCP) — releases up to 12.1. The issue is an access-control flaw in the web management interface, where authentication for Help Desk and User Provisioning roles is not properly enforced, allowing an authenticated attacker to modify priv...

CVE-2018-0321

A vulnerability in Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation RMI system. The vulnerability is due to an open port in the Network Interface and Configuration Engine NICE service. An attacker could exploit...

CVE-2018-0320

Cisco Prime Collaboration Provisioning (PCP) SQL Injection (CVE-2018-0320) affects PCP releases 12.1 and earlier. The root cause is lack of proper validation of user-supplied input in SQL queries within the web framework code, enabling an unauthenticated, remote attacker to execute arbitrary SQL ...

CVE-2018-0317

CVE-2018-0317 concerns Cisco Prime Collaboration Provisioning (PCP) web interface authentication/authorization. The issue, present in PCP Releases 12.2 and earlier, stems from insufficient web portal access control checks, enabling an authenticated, remote attacker to modify an access request and...

CVE-2018-0321

CVE-2018-0321 describes an unauthenticated remote access vulnerability in Cisco Prime Collaboration Provisioning (PCP) caused by an open port in the Network Interface and Configuration Engine (NICE) that exposes the Java RMI system. A remote attacker could access the RMI interface on affected PCP...