What is CVE-2017-6793?

CVE-2017-6793 is a medium-severity vulnerability in Cisco Prime Collaboration Provisioning, classified under Information Disclosure. CVSS score: 6.5/10. Published 2017-09-07.

How severe is CVE-2017-6793?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Cisco Prime Collaboration Provisioning

CVE-2017-6793

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit this vulnerability by accessing unauthorized information via the user interface. Cisco Bug IDs: CSCvd61932.

Vulnerability class: Information Disclosure

EPSS: 0.012 (65.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Cisco Prime_collaboration_provisioning
N/a Cisco Prime Collaboration Provisioning Tool — versions Cisco Prime Collaboration Provisioning Tool

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2017-6793?: CVE-2017-6793 is a medium-severity vulnerability in Cisco Prime Collaboration Provisioning, classified under Information Disclosure. CVSS score: 6.5/10. Published 2017-09-07.
How severe is CVE-2017-6793?: Medium severity. CVSS v3 base score is 6.5 out of 10.