N/A

A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by accessing the Policy Builder interface. A successful exploit could allow the attacker to make changes to existing repositories and create new repositories. Cisco Bug IDs: CSCvi35109.

N/A

关键功能的认证机制缺失

Cisco Policy Suite 安全漏洞

Cisco Policy Suite（CPS）是美国思科（Cisco）公司的一套下一代策略管理解决方案。该方案提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。 Cisco CPS 18.2.0之前版本中的Policy Builder界面存在安全漏洞，该漏洞源于程序缺少身份验证。远程攻击者可利用该漏洞访问Policy Builder界面，更改现有的库并创建新库。

N/A

N/A