CVE-2017-3843

MEDIUM

Cisco Prime Collaboration Assurance - Privilege Escalation

Title source: llm

Description

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. More Information: CSCvc99446. Known Affected Releases: 11.5(0).

References (3)

Scores

CVSS v3 4.3
EPSS 0.0020
EPSS Percentile 42.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-20
Status published

Affected Products (4)

cisco/prime_collaboration_assurance
cisco/prime_collaboration_assurance
cisco/prime_collaboration_assurance
n/a/Cisco Prime Collaboration Assurance < Cisco Prime Collaboration Assurance

Timeline

Published Feb 22, 2017
Tracked Since Feb 18, 2026