First published: Tue Jul 04 2017(Updated: )
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Prime Collaboration Provisioning | =11.2_base | |
Cisco Prime Collaboration Provisioning | =11.5.0 | |
Cisco Prime Collaboration Provisioning | =11.6_base | |
Cisco Prime Collaboration Provisioning | =12.1_base |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-6706 is classified as a medium severity vulnerability due to potential unauthorized access to sensitive information.
To fix CVE-2017-6706, update your Cisco Prime Collaboration Provisioning to the latest version recommended by Cisco.
CVE-2017-6706 affects Cisco Prime Collaboration Provisioning versions 11.2_base, 11.5.0, 11.6_base, and 12.1_base.
Organizations using affected versions of Cisco Prime Collaboration Provisioning may be impacted if they have unauthenticated local access.
CVE-2017-6706 is an information disclosure vulnerability that allows local attackers to access sensitive information.