First published: Wed Jul 18 2018(Updated: )
A vulnerability in the Policy Builder database of Cisco Policy Suite could allow an unauthenticated, remote attacker to connect directly to the Policy Builder database. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by connecting directly to the Policy Builder database. A successful exploit could allow the attacker to access and change any data in the Policy Builder database. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-policy-unauth-access
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Policy Suite Software |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of cisco-sa-20180718-policy-unauth-access is considered high due to the risk of unauthorized access to the Policy Builder database.
To fix cisco-sa-20180718-policy-unauth-access, you should update Cisco Policy Suite to the latest version that addresses this security vulnerability.
The cisco-sa-20180718-policy-unauth-access vulnerability is caused by a lack of authentication that allows unauthenticated remote attackers to connect to the Policy Builder database.
Organizations using Cisco Policy Suite that have not implemented necessary security measures are affected by the cisco-sa-20180718-policy-unauth-access vulnerability.
If affected by cisco-sa-20180718-policy-unauth-access, immediately update your Cisco Policy Suite software and review your security protocols to protect your database.