PT-2018-1364 · Cisco · Cisco Policy Suite

Publicado 2018-07-18 · Atualizado 2019-10-09 · CVE-2018-0375

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Policy Suite versions prior to 18.2.0

Description A vulnerability in the Cluster Manager of Cisco Policy Suite is due to the presence of undocumented, static user credentials for the root account. An attacker could exploit this vulnerability by using the account to log in to an affected system, allowing them to execute arbitrary commands as the root user. The vulnerability could be exploited by an unauthenticated, remote attacker.

Recommendations For versions prior to 18.2.0, update to version 18.2.0 or later to resolve the issue. As a temporary workaround, consider changing the default, static user credentials for the root account to prevent unauthorized access. Restrict access to the Cluster Manager component to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2018-00907

CVE-2018-0375

Produtos afetados

Cisco Policy Suite

Referências · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-policy-cm-default-psswrd · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-0375 · Aviso do Fabricante
• https://securitylab.ru/news/494535.php · Nota
• http://securityfocus.com/bid/104852 · Nota
• https://threatpost.com/critical-authentication-flaws-in-cisco-policy-suite-patched/134158 · Nota
• https://bdu.fstec.ru/vul/2018-00907 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-0375 · Nota de Segurança