CVE Catalog
CVE-2016-1416
CriticalSummary
Cisco Prime Collaboration Provisioning 10.6 SP2 mishandles LDAP authentication, allowing remote attackers to obtain administrator privileges via a crafted login attempt.
Risk Assessment
Attackers can gain full administrator privileges, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update to the latest software version to patch this vulnerability and to monitor authentication logs for suspicious activities.
Original NVD description (English source)
Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513.

