CVE-2018-0317
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an access request. An exploit could allow the attacker to promote their account to any role defined on the system. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 12.2 and prior. Cisco Bug IDs: CSCvc90286.
Una vulnerabilidad en la interfaz web de Cisco Prime Collaboration Provisioning (PCP) podría permitir que un atacante remoto autenticado escale sus privilegios. Esta vulnerabilidad se debe a las comprobaciones insuficientes de control de acceso al portal web. Un atacante podría explotar esta vulnerabilidad modificando una petición de acceso. Un exploit podría permitir que el atacante promocione su cuenta a cualquier rol definido en el sistema. Esta vulnerabilidad afecta a Cisco Prime Collaboration Provisioning (PCP) en versiones 12.2 y anteriores. Cisco Bug IDs: CSCvc90286.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-11-27 CVE Reserved
- 2018-06-07 CVE Published
- 2024-08-02 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
- CWE-862: Missing Authorization
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/104432 | Third Party Advisory | |
http://www.securitytracker.com/id/1041080 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Prime Collaboration Search vendor "Cisco" for product "Prime Collaboration" | <= 12.1 Search vendor "Cisco" for product "Prime Collaboration" and version " <= 12.1" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Prime Collaboration Provisioning Search vendor "Cisco" for product "Prime Collaboration Provisioning" | <= 12.2 Search vendor "Cisco" for product "Prime Collaboration Provisioning" and version " <= 12.2" | - |
Affected
|