CVE-2016-1357

Published: Mar 3, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allows remote attackers to bypass intended RBAC restrictions and read unspecified data via unknown vectors, aka Bug ID CSCut85211.

Affected (6)

Products: Cisco: Cisco Policy Suite

Cisco

1 product

Cisco Policy Suite

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Cisco Policy Suite	Version 7.0.1.3
Cisco Cisco Policy Suite	Version 7.0.2-att
Cisco Cisco Policy Suite	Version 7.0.2
Cisco Cisco Policy Suite	Version 7.0.3-att
Cisco Cisco Policy Suite	Version 7.0.4-att
Cisco Cisco Policy Suite	Version 7.0.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.