CVE-2018-0393

Cisco Policy Suite's Policy Builder interface is affected by CVE-2018-0393, a Read-Only User Effect Change vulnerability caused by insufficient authorization controls. An authenticated, remote attacker could modify an HTTP request via the Policy Builder interface to change existing policies. The ...

CVE-2018-0392

CVE-2018-0392 affects Cisco Policy Suite: a local, authenticated attacker can access files owned by another user due to world-readable permissions in the CLI. Root cause is insufficient access controls. Exploitation requires logging into the CLI; impact is exposure of potentially sensitive user-o...