CVE-2017-6703: cisco prime_collaboration_provisioning Improper Authentication

Vulnerability summary

CVE-2017-6703 is a medium (CVSS 5.9) Improper Authentication vulnerability in cisco prime_collaboration_provisioning. EPSS estimates a 1.53% chance of exploitation in the next 30 days, higher than 74.3% of scored vulnerabilities.

Timeline

1. 04-07-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.