CVE-2016-1416: Critical severity cisco prime collaboration provisioning vulnerability

Published Jul 2, 2016

Updated

Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513.

Affected Software

1 affected component

Cisco Prime Collaboration Provisioning=10.6.2

Event History

Jul 2, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-1416?

CVE-2016-1416 is considered a high severity vulnerability due to the potential for remote attackers to gain administrator privileges.

How can I fix CVE-2016-1416?

The recommended fix for CVE-2016-1416 is to upgrade Cisco Prime Collaboration Provisioning to version 10.6.2 or later.

What kind of attack does CVE-2016-1416 expose my system to?

CVE-2016-1416 exposes systems to potential unauthorized access through mishandled LDAP authentication.

Which versions of Cisco Prime Collaboration Provisioning are affected by CVE-2016-1416?

CVE-2016-1416 affects Cisco Prime Collaboration Provisioning version 10.6 SP2, specifically version 10.6.0.10602.

Is there a known workaround for CVE-2016-1416?

There are no documented workarounds for CVE-2016-1416, so upgrading to a patched version is essential.