Access Control Vulnerability in Cisco Prime Collaboration Provisioning

CVE-2018-0322

What is CVE-2018-0322?

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning enables an authenticated remote attacker to alter sensitive account data associated with any accounts on the device. This is due to a lack of proper access control measures on the Help Desk and User Provisioning roles assigned to authenticated users. The improper enforcement of these access restrictions could permit an attacker to modify critical attributes of accounts with higher privileges, potentially leading to unauthorized access and elevated privileges within the application. This affects Cisco Prime Collaboration Provisioning versions 12.1 and earlier.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References