Read-Only User Effect Change Vulnerability in Cisco Policy Suite

CVE-2018-0393

What is CVE-2018-0393?

A Read-Only User Effect Change vulnerability exists in the Policy Builder interface of Cisco Policy Suite, enabling authenticated attackers to manipulate policies. This weakness stems from inadequate authorization controls, allowing adversaries to modify HTTP requests to gain unauthorized access. Exploiting this flaw could permit unauthorized changes to established policies, compromising system integrity and security management.

References