Password Change Function Vulnerability in Cisco Prime Collaboration Provisioning

CVE-2018-0391

Summary

A vulnerability exists in the password change function of Cisco Prime Collaboration Provisioning, allowing an authenticated, remote attacker to disrupt the system's operation. This issue arises from inadequate validation of password change requests, enabling attackers to manipulate an administrator account password. Successfully exploiting this vulnerability can lead to the affected device becoming inoperable, resulting in a denial of service (DoS) condition. The impacted versions include all releases of Cisco Prime Collaboration Provisioning up to and including 12.2. For further information and mitigation steps, refer to the Cisco Security Advisory.

References