20160209 Cisco Prime Collaboration Provisioning Local Privilege Escalation Vulnerability

https://www.tenable.com/security/research/tra-2016-38

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is 9.0.x or 11.0.x prior to 11.1. It is, therefore, affected by a local privilege escalation vulnerability in its command line interface due to improper sanitization of user-supplied input. A local attacker with administrator-level access can exploit this to gain root access to the host operating system.

CVE-2016-1320

medium

Tenable Plugins

medium