cisco-sa-20180606-prime-escalation: Cisco Prime Collaboration Provisioning Access Control Deficiency in Batch Function Privilege Escalation Vulnerability
A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could exploit this vulnerability by uploading a batch file and having the batch file processed by the system. A successful exploit could allow the attacker to escalate privileges to the Administrator level.
There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-escalation
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180606-prime-escalation?
The severity of cisco-sa-20180606-prime-escalation is classified as high due to the potential for privilege escalation.
How do I fix cisco-sa-20180606-prime-escalation?
To fix cisco-sa-20180606-prime-escalation, apply the recommended software updates provided by Cisco.
What systems are affected by cisco-sa-20180606-prime-escalation?
cisco-sa-20180606-prime-escalation affects Cisco Prime Collaboration Provisioning.
What is the nature of the vulnerability in cisco-sa-20180606-prime-escalation?
The nature of the vulnerability in cisco-sa-20180606-prime-escalation is insufficient authorization enforcement on batch processing.
Who can be impacted by cisco-sa-20180606-prime-escalation?
Authenticated remote attackers can be impacted by cisco-sa-20180606-prime-escalation as they can escalate privileges to the Administrator level.