critical9.8
CVE-2018-0376
A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builde…
Impact
A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by accessing the Policy Builder interface. A successful exploit could allow the attacker to make changes to existing repositories and create new repositories. Cisco Bug IDs: CSCvi35109.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Mobility Services Engine | Version 18.0.0 |
| Cisco | Policy Suite | before 18.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104849
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-pspb-unauth-access
- http://www.securityfocus.com/bid/104849
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-pspb-unauth-access