PT-2016-4729
CVE-2016-1357
·
Published
2016-03-03
·
Updated
2016-03-14
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Policy Suite versions 7.0.1.3 through 7.0.4-att
Cisco Policy Suite version 7.5.0
Description
The issue allows remote attackers to bypass intended Role-Based Access Control (RBAC) restrictions. This could enable unauthorized access to read unspecified data. RBAC is a method of regulating access to computer resources based on the roles of individual users within an organization.
Recommendations
For Cisco Policy Suite versions 7.0.1.3 through 7.0.4-att, update to a version that includes the fix for Bug ID CSCut85211.
For Cisco Policy Suite version 7.5.0, update to a version that includes the fix for Bug ID CSCut85211.
Found an issue in the description? Have something to add? Feel free to write us 👾