PT-2017-17206 · Cisco · Cisco Prime Collaboration Provisioning

Publicado 2017-05-22 · Atualizado 2019-10-03 · CVE-2017-6637

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 11.1

Description The issue arises from improper input validation of HTTP requests and the lack of role-based access controls (RBACs) applied to requested HTTP URLs in the web interface. This allows an authenticated, remote attacker to delete any file from an affected system by sending a crafted HTTP request that utilizes directory traversal techniques to specify the path to a desired file location. A successful exploit could result in the deletion of any file from the system.

Recommendations For versions prior to 11.1, update to Release 11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation. Additionally, limiting the privileges of authenticated users could help reduce the potential impact of this issue until a patch is applied.

Correção

RCE

Enumeração de Fraquezas

CWE-20

CWE-264

Identificadores relacionados

CVE-2017-6637

ZDI-17-448

Produtos afetados

Cisco Prime Collaboration Provisioning

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-6637 · Nota de Segurança
• http://securityfocus.com/bid/98530 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp5 · Aviso do Fabricante
• http://securitytracker.com/id/1038515 · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-448 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6637 · Aviso do Fabricante