Lucene search

CiscoCVE-2017-6704

HistoryJul 04, 2017 - 12:29 a.m.

CVE-2017-6704

2017-07-0400:29:00

CWE-22

cisco

web.nvd.nist.gov

cisco

prime

collaboration

provisioning

vulnerability

web application

arbitrary file downloads

authenticated

remote attacker

nvd

cve-2017-6704

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected Releases: 12.1.

Affected configurations

Nvd

Node

ciscoprime_collaboration_provisioningMatch12.1

VendorProductVersionCPE
ciscoprime_collaboration_provisioning12.1cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	prime_collaboration_provisioning	12.1	cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:::::::*

CNA Affected

[
  {
    "product": "Cisco Prime Collaboration Provisioning Tool",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Prime Collaboration Provisioning Tool"
      }
    ]
  }
]

References

www.securityfocus.com/bid/99223

www.securitytracker.com/id/1038744

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp2

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

Related for CVE-2017-6704