Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authenticated, local attacker to elevate privileges to root on an affected system. This vulnerability is due to incorrect implementation of user role permissions. An attacker could exploit this vulnerability by authenticating to the application as a user with the BWORKS or BWSUPERADMIN role and issuing crafted commands on an affected system. A successful exploit could allow the attacker to execute commands beyond the sphere of their intended access level, including initiating installs or running operating system commands with elevated permissions. There are workarounds that address this vulnerability.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Vulnerability Type
特权管理不恰当
Vulnerability Title
Cisco BroadWorks 安全漏洞
Vulnerability Description
Cisco BroadWorks是美国思科（Cisco）公司的一个运营商级统一通信软件平台。用于在任何类型的有线或无线网络架构上部署来自公共网络平台的云呼叫。 Cisco BroadWorks存在安全漏洞，该漏洞源于权限管理功能中存在漏洞，可能允许经过身份验证的本地攻击者在受影响的系统上将权限提升为root，以下产品和版本受到影响：BroadWorks Application Delivery Platform、BroadWorks Application Server、BroadWorks Databa
CVSS Information
N/A
Vulnerability Type
N/A