PT-2018-2004 · Postgresql+1 · Postgresql+1

Published 2018-12-04 · Updated 2019-01-02 · CVE-2018-0468

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite (affected versions not specified)

Description The issue is related to the configuration of a local database in the Cisco Energy Management Suite, specifically due to the use of default access credentials for the PostgreSQL database. This could allow an authenticated, local attacker to access and modify confidential data by logging in to the machine where the suite is installed and establishing a local connection to the database.

Recommendations For existing installations, manually change the database access password as documented in the Workarounds section of the advisory. For new installations, ensure the fix that randomizes the database access password is applied. As a temporary workaround, consider restricting access to the PostgreSQL database to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2018-01620

CVE-2018-0468

Affected Products

Cisco Energy Management Suite

Postgresql

References · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181204-ems-sql-passwrd · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0468 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0468 · Security Note
• https://bdu.fstec.ru/vul/2018-01620 · Security Note
• https://tenable.com/security/research/tra-2018-42 · Note
• http://securityfocus.com/bid/106124 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181204-ems-sql-passwrd#work; · Note