CVE-2018-15466

Name of the Vulnerable Software and Affected Versions Cisco Policy Suite for Mobile (affected versions not specified)

Description The issue is related to insufficient access control in the Graphite web interface of the Cisco Policy Suite, which could allow a remote attacker to access protected data. The attacker must have access to the internal VLAN where the Cisco Policy Suite is deployed. The vulnerability is due to a lack of authentication, allowing an attacker to directly connect to the Graphite web interface and access various statistics and Key Performance Indicators (KPIs) regarding the Cisco Policy Suite environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.