Access Control Vulnerability in Cisco Policy Suite CLI

CVE-2018-0392

Summary

A vulnerability in the Command-Line Interface (CLI) of Cisco Policy Suite allows an authenticated local attacker to exploit insufficient access control permissions. This situation arises when files are unintentionally set to be world-readable, enabling unauthorized access to potentially sensitive information owned by other users. An attacker can take advantage of this flaw by logging into the CLI and accessing these vulnerable files. It is essential for users of Cisco Policy Suite to understand the risks associated with this vulnerability and implement necessary security measures.

References