Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could exploit this vulnerability by uploading a batch file and having the batch file processed by the system. A successful exploit could allow the attacker to escalate privileges to the Administrator level. Cisco Bug IDs: CSCvd86578.
CVSS Information
N/A
Vulnerability Type
权限、特权和访问控制
Vulnerability Title
Cisco Prime Collaboration Provisioning 权限许可和访问控制漏洞
Vulnerability Description
Cisco Prime Collaboration Provisioning（PCP）是美国思科（Cisco）公司的一套基于Web的下一代通信服务软件。该软件对IP电话、语音邮件和统一通信环境提供IP通信服务功能。 Cisco Prime Collaboration Provisioning中的batch provisioning功能存在提权漏洞，该漏洞源于程序没有充分的强制执行授权。远程攻击者可通过使该系统处理攻击者上传的批处理文件利用该漏洞将权限提升至管理员。
CVSS Information
N/A
Vulnerability Type
N/A