CVE-2017-6706

Published: Jul 4, 2017Modified: May 13, 2026

5.1

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.5 / Impact: 2.5

Source: NVD

Description

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.

Affected (4)

Products: Cisco: Prime Collaboration Provisioning

1 product

Prime Collaboration Provisioning

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Collaboration Provisioning	Version 11.2_base
Cisco Prime Collaboration Provisioning	Version 11.5.0
Cisco Prime Collaboration Provisioning	Version 11.6_base
Cisco Prime Collaboration Provisioning	Version 12.1_base

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://www.securityfocus.com/bid/99204

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038744

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/99204

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038744

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.