A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could exploit this vulnerability by submitting a password recovery request and changing the password for any user on an affected system. An exploit could allow the attacker to gain administrative-level privileges on the affected system. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd07253.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/104431 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1041079 | Third Party Advisory VDB Entry |
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-recovery | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: cisco
Published: 2018-06-07T12:00:00
Updated: 2018-06-13T09:57:01
Reserved: 2017-11-27T00:00:00
Link: CVE-2018-0319
JSON object: View
NVD Information
Status : Modified
Published: 2018-06-07T12:29:00.607
Modified: 2019-10-09T23:31:45.723
Link: CVE-2018-0319
JSON object: View
Redhat Information
No data.