cisco-sa-20180606-cpcp-id: Cisco Prime Collaboration Provisioning Cleartext Passwords Written to World-Readable File Vulnerability
A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensitive data. The vulnerability is due to improper logging of authentication data. An attacker could exploit this vulnerability by monitoring a specific file for this authentication data. An exploit could allow the attacker to gain authentication information for other users.
There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-cpcp-id
Affected Software
Event History
Frequently Asked Questions
What is the severity of Cisco vulnerability cisco-sa-20180606-cpcp-id?
The severity of Cisco vulnerability cisco-sa-20180606-cpcp-id is considered high due to the potential exposure of sensitive data.
How do I fix Cisco vulnerability cisco-sa-20180606-cpcp-id?
To fix Cisco vulnerability cisco-sa-20180606-cpcp-id, apply the necessary patches provided by Cisco for the affected version of Prime Collaboration Provisioning.
What is the risk associated with Cisco vulnerability cisco-sa-20180606-cpcp-id?
The risk associated with Cisco vulnerability cisco-sa-20180606-cpcp-id is that it allows unauthenticated attackers to access sensitive authentication data.
Who is affected by Cisco vulnerability cisco-sa-20180606-cpcp-id?
Users of Cisco Prime Collaboration Provisioning are affected by Cisco vulnerability cisco-sa-20180606-cpcp-id.
Can Cisco vulnerability cisco-sa-20180606-cpcp-id be exploited remotely?
No, Cisco vulnerability cisco-sa-20180606-cpcp-id requires local access to the affected system for exploitation.