Password Change Function Vulnerability in Cisco Prime Collaboration Provisioning
CVE-2018-0391
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 1 August 2018
What is CVE-2018-0391?
A vulnerability exists in the password change function of Cisco Prime Collaboration Provisioning, allowing an authenticated, remote attacker to disrupt the system's operation. This issue arises from inadequate validation of password change requests, enabling attackers to manipulate an administrator account password. Successfully exploiting this vulnerability can lead to the affected device becoming inoperable, resulting in a denial of service (DoS) condition. The impacted versions include all releases of Cisco Prime Collaboration Provisioning up to and including 12.2. For further information and mitigation steps, refer to the Cisco Security Advisory.
Affected Version(s)
Cisco Prime Collaboration Provisioning unknown Cisco Prime Collaboration Provisioning unknown