CVE-2018-0336

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate…

published June 7, 2018

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could exploit this vulnerability by uploading a batch file and having the batch file processed by the system. A successful exploit could allow the attacker to escalate privileges to the Administrator level. Cisco Bug IDs: CSCvd86578.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02336 · 83.4th percentile
Published
2018-06-07T21:00Z
EPSS history
Timeline
  • 07 JUN 21:00Z
    A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate…
    cvelistv5