N/A

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users. The vulnerability is due to weak login controls. An attacker could exploit this vulnerability by using a brute-force attack (Repeated Bad Login Attempts). A successful exploit could allow the attacker to restrict user access. Manual administrative intervention is required to restore access. Cisco Bug IDs: CSCvd07264.

N/A

内存缓冲区边界内操作的限制不恰当

Cisco Prime Collaboration Provisioning Tool Web portal 安全漏洞

Cisco Prime Collaboration Provisioning Tool是美国思科（Cisco）公司的一套基于Web的下一代通信服务工具。该工具对IP电话、语音邮件和统一通信环境提供IP通信服务功能。Web portal是其中的一个Web门户。 Cisco Prime Collaboration Provisioning Tool中的Web portal存在拒绝服务漏洞，该漏洞源于较弱的登录控制。远程攻击者可通过实施暴力破解攻击利用该漏洞限制用户访问。

N/A

N/A