cisco-sa-20181107-pca-overwrite: Cisco Prime Collaboration Assurance File Overwrite Vulnerability
A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input field to provide a custom path location. A successful exploit could allow the attacker to overwrite files on the file system. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-pca-overwrite
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20181107-pca-overwrite?
The severity of cisco-sa-20181107-pca-overwrite is considered high due to the potential for authenticated remote file system manipulation.
How do I fix cisco-sa-20181107-pca-overwrite?
To fix cisco-sa-20181107-pca-overwrite, apply the recommended patches and updates provided by Cisco for Prime Collaboration Assurance.
Who is affected by cisco-sa-20181107-pca-overwrite?
Cisco Prime Collaboration Assurance users are affected by cisco-sa-20181107-pca-overwrite if they have not implemented the necessary security measures.
What type of attacker can exploit cisco-sa-20181107-pca-overwrite?
An authenticated, remote attacker can exploit cisco-sa-20181107-pca-overwrite to overwrite files on the system.
What is the cause of cisco-sa-20181107-pca-overwrite?
The cause of cisco-sa-20181107-pca-overwrite is insufficient input validation within the web-based UI of Cisco Prime Collaboration Assurance.