CVE-2017-6621

Cisco Prime Collaboration Provisioning logconfigtracer Directory Traversal Information Disclosure Vulnerability

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insufficient protection of sensitive data when responding to an HTTP request on the web interface. An attacker could exploit the vulnerability by sending a crafted HTTP request to the application to access specific system files. An exploit could allow the attacker to obtain sensitive information about the application which could include user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases 10.6 through 11.5. Cisco Bug IDs: CSCvc99626.

Una vulnerabilidad en la interfaz web de Prime Collaboration Provisioning de Cisco podría permitir a un atacante no autenticado remoto acceder a datos confidenciales. El atacante podría usar esta información para conducir ataques de reconocimiento adicionales. La vulnerabilidad es debido a una protección insuficiente de los datos confidenciales cuando se responde a una petición HTTP en la interfaz web. Un atacante podría explotar la vulnerabilidad mediante el envío de una petición HTTP diseñada a la aplicación para acceder a archivos específicos del sistema. Una vulnerabilidad podría permitirle al atacante obtener información confidencial sobre la aplicación que podría incluir las credenciales del usuario. Esta vulnerabilidad afecta a Prime Collaboration Provisioning versiones de software desde 10.6 hasta 11.5 de Cisco. IDs de Bug de Cisco: CSCvc99626.

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the logconfigtracer.jsp page, which listens on TCP port 443 by default. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose any files accessible to the root user.

*Credits: rgod

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2017-03-09 CVE Reserved
2017-05-18 CVE Published
2024-08-05 CVE Updated
2024-10-28 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (3)

URL	Tag	Source
http://www.securityfocus.com/bid/98522	Third Party Advisory
http://www.securitytracker.com/id/1038508	Vdb Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp2	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				9.0.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "9.0.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				9.5.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "9.5.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				10.0.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "10.0.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				10.5.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "10.5.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				10.5.1 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "10.5.1"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				10.6.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "10.6.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				10.6.2 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "10.6.2"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				11.0.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "11.0.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				11.1.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "11.1.0"		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning"				11.5.0 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version "11.5.0"		-		Affected