CVE-2017-3844

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are vulnerable. Cisco Prime Collaboration Assurance software versions prior to 11.0 are not vulnerable. More Information: CSCvc86238. Known Affected Releases: 11.5(0).

• CWE-20

• http://www.securityfocus.com/bid/96247
• http://www.securitytracker.com/id/1037843
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp2Vendor Advisory
• http://www.securityfocus.com/bid/96247
• http://www.securitytracker.com/id/1037843
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-pcp2Vendor Advisory

Published

Feb 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3838A vulnerability in Cisco Secure Access Control System (ACS) …
• CVE-2017-3839An XML External Entity vulnerability in the web-based user i…
• CVE-2017-3840A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3841A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3842A vulnerability in the web-based management interface of the…
• CVE-2017-3843A vulnerability in the file download functions for Cisco Pri…
• CVE-2017-3845A vulnerability in the web-based management interface of Cis…
• CVE-2017-3846A vulnerability in the Client Manager Server of Cisco Worklo…
• CVE-2017-3847A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-3848A vulnerability in the HTTP web-based management interface o…
• CVE-2017-3849A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3850A vulnerability in the Autonomic Networking Infrastructure (…