CVE-2017-6706
Published Jul 4, 2017
Last updated 7 years ago
Overview
- Description
- A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 5.1
- Impact score
- 2.5
- Exploitability score
- 2.5
- Vector string
- CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 3.6
- Impact score
- 4.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.2_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "692B0971-C745-47D6-92E3-5361D4108F95"
},
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31DC57C2-8870-4663-830F-C6209F47DF06"
},
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_provisioning:11.6_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFE3B08D-338D-49EF-A76D-599FC36A18F9"
},
{
"criteria": "cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD3A6CED-EBF9-47B1-94F7-7FE63A297418"
}
],
"operator": "OR"
}
]
}
]