Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the CPS appliance could allow an authenticated, local attacker to escalate their privilege level to root. The vulnerability is due to incorrect sudoers permissions on the script file. An attacker could exploit this vulnerability by authenticating to the device and providing crafted user input at the CLI, using this script file to escalate their privilege level and execute commands as root. A successful exploit could allow the attacker to acquire root-level privileges and take full control of the appliance. The user has to be logged-in to the device with valid credentials for a specific set of users. The Cisco Policy Suite application is vulnerable when running software versions 10.0.0, 10.1.0, or 11.0.0. Cisco Bug IDs: CSCvc07366.
CVSS Information
N/A
Vulnerability Type
权限、特权和访问控制
Vulnerability Title
Cisco Policy Suite Software 路径遍历漏洞
Vulnerability Description
Cisco Policy Suite (CPS) Software是美国思科（Cisco）公司的一套下一代策略管理软件。该软件提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。 CPS Software 10.0.0版本、10.1.0版本和11.0.0版本中的脚本文件存在目录遍历漏洞，该漏洞源于程序为脚本文件分配了错误的权限。本地攻击者可利用该漏洞提升权限，并以root权限执行命令。
CVSS Information
N/A
Vulnerability Type
N/A