CVE-2016-1357

MEDIUM

Cisco Policy Suite <7.5.0 - Auth Bypass

Title source: llm

Description

The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allows remote attackers to bypass intended RBAC restrictions and read unspecified data via unknown vectors, aka Bug ID CSCut85211.

References (1)

[Vendor Advisory] http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc

Scores

CVSS v3 5.3

EPSS 0.0017

EPSS Percentile 38.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-200

Status draft

Affected Products (6)

cisco/cisco_policy_suite

Timeline

Published Mar 03, 2016

Tracked Since Feb 18, 2026