A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploit this vulnerability by submitting a password reset request and changing the password for any user on an affected system. An exploit could allow the attacker to gain administrative-level privileges on the affected system. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd07245.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/104434 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1041082 | Third Party Advisory VDB Entry |
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-reset | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: cisco
Published: 2018-06-07T12:00:00
Updated: 2018-06-13T09:57:01
Reserved: 2017-11-27T00:00:00
Link: CVE-2018-0318
JSON object: View
NVD Information
Status : Modified
Published: 2018-06-07T12:29:00.573
Modified: 2019-10-09T23:31:45.537
Link: CVE-2018-0318
JSON object: View
Redhat Information
No data.