PT-2017-17204 · Cisco · Cisco Prime Collaboration Provisioning

Published 2017-05-22 · Updated 2019-10-03 · CVE-2017-6635

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 12.1

Description The issue arises from the software's failure to properly validate HTTP request inputs and apply role-based access controls (RBACs) to requested HTTP URLs. This allows an authenticated, remote attacker to delete any file from an affected system by sending a crafted HTTP request that utilizes directory traversal techniques to specify a file location. A successful exploit could result in the deletion of any file from the system.

Recommendations For versions prior to 12.1, update to Release 12.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation. Additionally, limiting the privileges of authenticated users could help reduce the potential impact of this issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

CWE-264

Related Identifiers

CVE-2017-6635

ZDI-17-446

Affected Products

Cisco Prime Collaboration Provisioning

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-6635 · Security Note
• http://securityfocus.com/bid/98535 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-446 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6635 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp3 · Vendor Advisory
• http://securitytracker.com/id/1038514 · Note