cisco-sa-20180801-pcp-dos: Cisco Prime Collaboration Provisioning Unauthorized Password Change Denial of Service Vulnerability
A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. The vulnerability is due to insufficient validation of a password change request. An attacker could exploit this vulnerability by changing a specific administrator account password. A successful exploit could allow the attacker to cause the affected device to become inoperable, resulting in a denial of service (DoS) condition.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-pcp-dos
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180801-pcp-dos?
The cisco-sa-20180801-pcp-dos vulnerability is classified as a high severity issue.
How do I fix cisco-sa-20180801-pcp-dos?
To fix the cisco-sa-20180801-pcp-dos vulnerability, update Cisco Prime Collaboration Provisioning to the latest version as advised in security recommendations.
Who is affected by cisco-sa-20180801-pcp-dos?
Cisco Prime Collaboration Provisioning users are affected by the cisco-sa-20180801-pcp-dos vulnerability.
What does cisco-sa-20180801-pcp-dos allow attackers to do?
The cisco-sa-20180801-pcp-dos vulnerability allows authenticated remote attackers to render the system inoperable.
What causes the cisco-sa-20180801-pcp-dos vulnerability?
The cisco-sa-20180801-pcp-dos vulnerability is caused by insufficient validation of a password change request.