Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-64rj-5cf2-pc5w

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input field to provide a custom path location. A successful exploit could allow the attacker to overwrite files on the file system.

A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input field to provide a custom path location. A successful exploit could allow the attacker to overwrite files on the file system.

EPSS

Процентиль: 51%
0.0028
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
около 7 лет назад

A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input field to provide a custom path location. A successful exploit could allow the attacker to overwrite files on the file system.

CVSS3: 6.5
fstec
больше 7 лет назад

Уязвимость веб-интерфейса программного средства управления унифицированными коммуникациями Cisco Prime Collaboration Assurance, вызванная ошибками при обработке входных данных, позволяющая нарушителю перезаписывать файлы в файловой системе

EPSS

Процентиль: 51%
0.0028
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22