CVE-2018-0392

CVE-2018-0392 affects Cisco Policy Suite: a local, authenticated attacker can access files owned by another user due to world-readable permissions in the CLI. Root cause is insufficient access controls. Exploitation requires logging into the CLI; impact is exposure of potentially sensitive user-o...

CVE-2018-0393

Cisco Policy Suite's Policy Builder interface is affected by CVE-2018-0393, a Read-Only User Effect Change vulnerability caused by insufficient authorization controls. An authenticated, remote attacker could modify an HTTP request via the Policy Builder interface to change existing policies. The ...