8.8
CVSSv3

CVE-2018-0336

Published: 07/06/2018 Updated: 09/10/2019
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote malicious user to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could exploit this vulnerability by uploading a batch file and having the batch file processed by the system. A successful exploit could allow the malicious user to escalate privileges to the Administrator level. Cisco Bug IDs: CSCvd86578.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco prime collaboration 12.1

Vendor Advisories

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level The vulnerability is due to insufficient authorization enforcement on batch processing An attacker could exploit this vulnerability by uploading a batch file an ...