CVE-2017-6636

CVE-2017-6636 describes a directory traversal vulnerability in Cisco Prime Collaboration Provisioning Software prior to Release 11.1. An authenticated, remote attacker could exploit this flaw due to improper input validation and a lack of role-based access controls on HTTP requests. By sending a crafted HTTP request, an attacker could view any file on the affected system. The vulnerability has a CVSSv3 score of 6.5 (Medium), indicating a network-based attack with low privileges required and high confidentiality impact. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.