CVE-2017-6759 | BDVDB-2026-88551 Detail

Cisco Prime Collaboration Provisioning Tool

Description#

A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by triggering the upgrade package installation functionality. Cisco Bug IDs: CSCvc90304.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-20 Improper Input Validation

References#

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcpt
http://www.securitytracker.com/id/1039062
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc90304

Exploit#

No public exploit known

History#

Version 12017-08-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.