cnvd - cnvd-2017-32928

cnvd-2017-32928

Vulnerability from cnvd

Title: Cisco Prime Collaboration Provisioning SQL注入漏洞

Description:

Cisco Prime Collaboration Provisioning application是美国思科（Cisco）公司的一套基于Web的下一代通信服务软件。该软件对IP电话、语音邮件和统一通信环境提供IP通信服务功能。

Cisco Prime Collaboration Provisioning应用程序12.3之前的版本中的SQL数据库界面的Web框架代码存在SQL注入漏洞，该漏洞源于程序未能正确的验证SQL查询中用户提交的输入。远程攻击者可通过向受影响的设备发送带有恶意SQL语句的特制URL利用该漏洞确定SQL数据库中的特定值是否存在，写入恶意的输入。

Severity: 高

Patch Name: Cisco Prime Collaboration Provisioning SQL注入漏洞的补丁

Patch Description:

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp

Reference: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp

Impacted products

Name
Cisco Prime Collaboration Provisioning <12.3

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "101640"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-12276"
    }
  },
  "description": "Cisco Prime Collaboration Provisioning application\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u57fa\u4e8eWeb\u7684\u4e0b\u4e00\u4ee3\u901a\u4fe1\u670d\u52a1\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u5bf9IP\u7535\u8bdd\u3001\u8bed\u97f3\u90ae\u4ef6\u548c\u7edf\u4e00\u901a\u4fe1\u73af\u5883\u63d0\u4f9bIP\u901a\u4fe1\u670d\u52a1\u529f\u80fd\u3002\r\n\r\nCisco Prime Collaboration Provisioning\u5e94\u7528\u7a0b\u5e8f12.3\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u7684SQL\u6570\u636e\u5e93\u754c\u9762\u7684Web\u6846\u67b6\u4ee3\u7801\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u9a8c\u8bc1SQL\u67e5\u8be2\u4e2d\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u53d1\u9001\u5e26\u6709\u6076\u610fSQL\u8bed\u53e5\u7684\u7279\u5236URL\u5229\u7528\u8be5\u6f0f\u6d1e\u786e\u5b9aSQL\u6570\u636e\u5e93\u4e2d\u7684\u7279\u5b9a\u503c\u662f\u5426\u5b58\u5728\uff0c\u5199\u5165\u6076\u610f\u7684\u8f93\u5165\u3002",
  "discovererName": "Vincent Hutsebaut",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-32928",
  "openTime": "2017-11-07",
  "patchDescription": "Cisco Prime Collaboration Provisioning application\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u57fa\u4e8eWeb\u7684\u4e0b\u4e00\u4ee3\u901a\u4fe1\u670d\u52a1\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u5bf9IP\u7535\u8bdd\u3001\u8bed\u97f3\u90ae\u4ef6\u548c\u7edf\u4e00\u901a\u4fe1\u73af\u5883\u63d0\u4f9bIP\u901a\u4fe1\u670d\u52a1\u529f\u80fd\u3002\r\n\r\nCisco Prime Collaboration Provisioning\u5e94\u7528\u7a0b\u5e8f12.3\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u7684SQL\u6570\u636e\u5e93\u754c\u9762\u7684Web\u6846\u67b6\u4ee3\u7801\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u9a8c\u8bc1SQL\u67e5\u8be2\u4e2d\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u53d1\u9001\u5e26\u6709\u6076\u610fSQL\u8bed\u53e5\u7684\u7279\u5236URL\u5229\u7528\u8be5\u6f0f\u6d1e\u786e\u5b9aSQL\u6570\u636e\u5e93\u4e2d\u7684\u7279\u5b9a\u503c\u662f\u5426\u5b58\u5728\uff0c\u5199\u5165\u6076\u610f\u7684\u8f93\u5165\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Prime Collaboration Provisioning SQL\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Prime Collaboration Provisioning \u003c12.3"
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp",
  "serverity": "\u9ad8",
  "submitTime": "2017-11-02",
  "title": "Cisco Prime Collaboration Provisioning SQL\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2017-12276 (GCVE-0-2017-12276)

Vulnerability from cvelistv5

Published

2017-11-02 16:00

Modified

2024-08-05 18:36

Severity ?

CWE

CWE-20

Summary

A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. The attacker could read or write information from the SQL database. The vulnerability is due to a lack of proper validation on user-supplied input within SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application. An exploit could allow the attacker to determine the presence of certain values and write malicious input in the SQL database. The attacker would need to have valid user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.3. Cisco Bug IDs: CSCvf47935.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1039711	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/101640	vdb-entry, x_refsource_BID
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Cisco Prime Collaboration Provisioning	Version: Cisco Prime Collaboration Provisioning

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:36:54.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1039711",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039711"
          },
          {
            "name": "101640",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101640"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Prime Collaboration Provisioning",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco Prime Collaboration Provisioning"
            }
          ]
        }
      ],
      "datePublic": "2017-11-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. The attacker could read or write information from the SQL database. The vulnerability is due to a lack of proper validation on user-supplied input within SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application. An exploit could allow the attacker to determine the presence of certain values and write malicious input in the SQL database. The attacker would need to have valid user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.3. Cisco Bug IDs: CSCvf47935."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1039711",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039711"
        },
        {
          "name": "101640",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101640"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2017-12276",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Prime Collaboration Provisioning",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco Prime Collaboration Provisioning"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. The attacker could read or write information from the SQL database. The vulnerability is due to a lack of proper validation on user-supplied input within SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application. An exploit could allow the attacker to determine the presence of certain values and write malicious input in the SQL database. The attacker would need to have valid user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.3. Cisco Bug IDs: CSCvf47935."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1039711",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039711"
            },
            {
              "name": "101640",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101640"
            },
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-cpcp"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2017-12276",
    "datePublished": "2017-11-02T16:00:00",
    "dateReserved": "2017-08-03T00:00:00",
    "dateUpdated": "2024-08-05T18:36:54.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted