Intrusion PreventionCisco.Prime.Collaboration.Provisioning.Path.Traversal
Description
This indicates an attack attempt against a Directory Traversal vulnerability in Cisco Prime Collaboration Provisioning.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application while handling maliciously crafted requests. A remote attacker can exploit this to access arbitrary file on the targeted server, via a crafted request.
Affected Products
Cisco Systems Prime Collaboration Provisioning 10.6 through 11.5
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp2
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-07-25 | 28.833 |
Modified
|
Name:Cisco. Prime. Collaboration. Provisioning. Directory. Traversal:Cisco. Prime. Collaboration. Provisioning. Path. Traversal |
| ID | 44305 |
| Created | Aug 09, 2017 |
| Updated | Jul 23, 2024 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 3.82% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Cisco |
| Profile Type | Path Traversal |