CVE-2017-6659
HighSummary
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the device, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update to the latest software version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Cisco Prime Collaboration Assurance
See all- CVE-2015-6389High
Cisco Prime Collaboration Assurance before version 11.0 has a hardcoded cmuser account that allows remote attackers to gain access by establishing an SSH session and leveraging knowledge of this account's password.
- CVE-2015-4306High
The web framework in Cisco Prime Collaboration Assurance before version 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions and impersonate administrators of arbitrary tenant domains by discovering a session identifier and constructing a crafted URL.
- CVE-2015-4304High
The web framework in Cisco Prime Collaboration Assurance before version 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, enabling the creation of administrative accounts or reading data from arbitrary tenant domains via a crafted URL.
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected Releases: 11.5(0) 11.6.