CVE-2018-0317: High severity cisco prime collaboration vulnerability
A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an access request. An exploit could allow the attacker to promote their account to any role defined on the system. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 12.2 and prior. Cisco Bug IDs: CSCvc90286.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0317?
CVE-2018-0317 is a vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) that allows an authenticated, remote attacker to escalate their privileges.
What is the severity of CVE-2018-0317?
CVE-2018-0317 is classified as a high severity vulnerability with a severity value of 8.8.
How does the vulnerability in CVE-2018-0317 occur?
The vulnerability in CVE-2018-0317 occurs due to insufficient web portal access control checks.
How can an attacker exploit CVE-2018-0317?
An attacker can exploit CVE-2018-0317 by modifying an account profile.
Are there any references available for CVE-2018-0317?
Yes, you can find references for CVE-2018-0317 at the following links: [SecurityFocus](http://www.securityfocus.com/bid/104432), [SecurityTracker](http://www.securitytracker.com/id/1041080), [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-bypass)