CVE-2020-3193

MEDIUM

Cisco Prime Collaboration Provisioning - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected device. The vulnerability exists because replies from the web-based management interface include unnecessary server information. An attacker could exploit this vulnerability by inspecting replies received from the web-based management interface. A successful exploit could allow the attacker to obtain details about the operating system, including the web server version that is running on the device, which could be used to perform further attacks.

References (1)

Core 1

Scores

CVSS v3 5.3
EPSS 0.0088
EPSS Percentile 75.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (2)
cisco/prime_collaboration_provisioning 12.6 (2 CPE variants)
cisco/prime_collaboration_provisioning < 12.6
Published Mar 04, 2020
Tracked Since Feb 18, 2026