CVE-2018-0335 describes a high-severity vulnerability in Cisco Prime Collaboration Provisioning, where improper logging of authentication data allows an unauthenticated, local attacker to view sensitive information. An attacker could exploit this by monitoring a world-readable file containing cleartext passwords, leading to the compromise of other user authentication details. The vulnerability has a CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability, with low attack complexity. While no active exploitation or public exploit code is known, and community discussion is minimal, organizations using affected Cisco products should be aware of this potential risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.2CPE matchmatch criteria | cpe:2.3:a:cisco:prime_collaboration:12.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.