PT-2018-8807 · Cisco · Cisco Policy Suite

Published 2018-07-18 · Updated 2019-10-09 · CVE-2018-0392

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Policy Suite (affected versions not specified)

Description A security issue in the CLI of Cisco Policy Suite allows an authenticated, local attacker to access files owned by another user due to insufficient access control permissions. An attacker could exploit this by logging in to the CLI, potentially accessing sensitive files owned by a different user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

CWE-275

Related Identifiers

CVE-2018-0392

Affected Products

Cisco Policy Suite

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-policy-suite-data · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0392 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0392 · Vendor Advisory
• http://securityfocus.com/bid/104866 · Note