cisco-sa-20180606-prime-bypass: Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability
A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an access request. An exploit could allow the attacker to promote their account to any role defined on the system.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-bypass
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180606-prime-bypass?
The severity of cisco-sa-20180606-prime-bypass is considered high due to its potential for privilege escalation.
How do I fix cisco-sa-20180606-prime-bypass?
To fix cisco-sa-20180606-prime-bypass, apply the latest patches provided by Cisco for Prime Collaboration Provisioning.
Who is affected by cisco-sa-20180606-prime-bypass?
Users of Cisco Prime Collaboration Provisioning are affected by the cisco-sa-20180606-prime-bypass vulnerability.
What type of vulnerability is cisco-sa-20180606-prime-bypass?
cisco-sa-20180606-prime-bypass is a web interface vulnerability that allows for privilege escalation.
Can cisco-sa-20180606-prime-bypass be exploited remotely?
Yes, cisco-sa-20180606-prime-bypass can be exploited by an authenticated remote attacker.