cisco-sa-20180606-prime-password-recovery: Cisco Prime Collaboration Provisioning Unauthorized Password Recovery Vulnerability
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could exploit this vulnerability by submitting a password recovery request and changing the password for any user on an affected system. An exploit could allow the attacker to gain administrative-level privileges on the affected system.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-recovery
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180606-prime-password-recovery?
The severity of cisco-sa-20180606-prime-password-recovery is rated as high due to the potential for unauthorized access.
How do I fix cisco-sa-20180606-prime-password-recovery?
To fix cisco-sa-20180606-prime-password-recovery, apply the latest security patches provided by Cisco for Prime Collaboration Provisioning.
Who is affected by cisco-sa-20180606-prime-password-recovery?
Cisco Prime Collaboration Provisioning users are affected by cisco-sa-20180606-prime-password-recovery.
What type of attack can exploit cisco-sa-20180606-prime-password-recovery?
cisco-sa-20180606-prime-password-recovery can be exploited by unauthenticated remote attackers.
What causes the cisco-sa-20180606-prime-password-recovery vulnerability?
The vulnerability is caused by insufficient validation of password recovery requests in Cisco Prime Collaboration Provisioning.