CVE Catalog

CVE-2016-1416

Critical
Published: Translated: NVD NIST

Summary

Cisco Prime Collaboration Provisioning 10.6 SP2 mishandles LDAP authentication, allowing remote attackers to obtain administrator privileges via a crafted login attempt.

Risk Assessment

Attackers can gain full administrator privileges, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to update to the latest software version to patch this vulnerability and to monitor authentication logs for suspicious activities.

Original NVD description (English source)

Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS