CVE-2017-6705
published 2017-07-04CVE-2017-6705: A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive…
PriorityP422medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.35%
27.4th percentile
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning_tool | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mp6j-74mq-2vwh: A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive
ghsa_unreviewed·2022-05-17
CVE-2017-6705 [MEDIUM] CWE-200 GHSA-mp6j-74mq-2vwh: A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1.
Cisco
Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability
vendor_cisco·2017-06-21·CVSS 5.5
CVE-2017-6705 [MEDIUM] CWE-200 Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability
Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information.
The vulnerability is due to insecure file permissions. A successful exploit could allow the attacker to access sensitive information about the system.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3
Cisco
Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-6705 Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability
CVE-2017-6705: Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. The vulnerability is due to insecure file permissions. A successful exploit could allow the attacker to access sensitive information about the system. There are no
CVSS: 3.0
CWE: CWE-200, CWE-200
Bug IDs: CSCvc82973
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/99206http://www.securitytracker.com/id/1038744https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3http://www.securityfocus.com/bid/99206http://www.securitytracker.com/id/1038744https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3
2017-07-04
Published