Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information.

The vulnerability is due to the logging of sensitive details of specific user actions. An attacker could exploit this vulnerability by accessing specific system log files.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://ift.tt/2rVu0z1 A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information.

The vulnerability is due to the logging of sensitive details of specific user actions. An attacker could exploit this vulnerability by accessing specific system log files.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://ift.tt/2rVu0z1
Security Impact Rating: Medium
CVE: CVE-2017-6706

from Cisco Security Advisory http://ift.tt/2rVu0z1