PT-2018-8807 · Cisco · Cisco Policy Suite

Publicado 2018-07-18 · Atualizado 2019-10-09 · CVE-2018-0392

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Policy Suite (affected versions not specified)

Description A security issue in the CLI of Cisco Policy Suite allows an authenticated, local attacker to access files owned by another user due to insufficient access control permissions. An attacker could exploit this by logging in to the CLI, potentially accessing sensitive files owned by a different user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Enumeração de Fraquezas

CWE-732

CWE-275

Identificadores relacionados

CVE-2018-0392

Produtos afetados

Cisco Policy Suite

Referências · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-policy-suite-data · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0392 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0392 · Aviso do Fabricante
• http://securityfocus.com/bid/104866 · Nota