CVE-2017-6704: Path Traversal
A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected Releases: 12.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6704?
CVE-2017-6704 is classified as a high-severity vulnerability because it allows remote attackers to perform arbitrary file downloads.
How do I fix CVE-2017-6704?
To fix CVE-2017-6704, you should update to the latest version of Cisco Prime Collaboration Provisioning that addresses the vulnerability.
Who is affected by CVE-2017-6704?
CVE-2017-6704 affects users of Cisco Prime Collaboration Provisioning version 12.1.
What type of attack can be executed using CVE-2017-6704?
CVE-2017-6704 can be exploited to perform arbitrary file downloads, potentially allowing attackers to read files from the underlying filesystem.
Is CVE-2017-6704 a remote vulnerability?
Yes, CVE-2017-6704 allows an authenticated remote attacker to exploit the vulnerability.