CVE:CVE-2018-0321
CNNVD:CNNVD-201806-394
Cisco Prime Collaboration Provisioning（PCP）是美国思科（Cisco）公司的一套基于Web的下一代通信服务软件。该软件对IP电话、语音邮件和统一通信环境提供IP通信服务功能。
Cisco PCP 11.6及之前版本中存在授权问题漏洞，该漏洞源于Network Interface和Configuration Engine (NICE)服务中存在一个开放的端口。远程攻击者可利用该漏洞执行恶意的操作。
solution:Upgrade cisco prime_collaboration to a higher version than 11.6,and avoid the version (,11.6]; Upgrade cisco prime_collaboration_assurance to a higher version than 11.6,and avoid the version (,11.6]; Upgrade cisco prime_collaboration_provisioning to a higher version than 11.6,and avoid the version (,11.6]