CVE-2018-15450CWE-20

Cisco Prime Collaboration Assurance File Overwrite Vulnerability

Medium · published November 8, 2018

CVSS v3.0
6.5
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input field to provide a custom path location. A successful exploit could allow the attacker to overwrite files on the file system.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02538 · 84.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-11-08T20:00Z
EPSS history
Timeline
  • 08 NOV 20:00Z
    Cisco Prime Collaboration Assurance File Overwrite Vulnerability
    cvelistv5