CVE-2017-6706
published 2017-07-04CVE-2017-6706: A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive…
PriorityP420medium5.1CVSS 3.0
AVLACLPRNUINSUCLILAN
EPSS
0.38%
30.6th percentile
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning | — | — |
| cisco | prime_collaboration_provisioning_tool_log_file | — | — |
CVSS provenance
nvdv3.05.1MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
vendor_cisco5.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-53xh-354g-39v8: A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire
ghsa_unreviewed·2022-05-17
CVE-2017-6706 [MEDIUM] CWE-200 GHSA-53xh-354g-39v8: A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.
Cisco
Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability
vendor_cisco·2017-06-21·CVSS 5.1
CVE-2017-6706 [MEDIUM] CWE-200 Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability
Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information.
The vulnerability is due to the logging of sensitive details of specific user actions. An attacker could exploit this vulnerability by accessing specific system log files.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4
Cisco
Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-6706 Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability
CVE-2017-6706: Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. The vulnerability is due to the logging of sensitive
CVSS: 3.0
CWE: CWE-200, CWE-200
Bug IDs: CSCvd07260
No detection rules found.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/99204http://www.securitytracker.com/id/1038744https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4http://www.securityfocus.com/bid/99204http://www.securitytracker.com/id/1038744https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4
2017-07-04
Published