CVE-2018-15466— Cisco CPS 访问控制错误漏洞

Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The vulnerability is due to lack of authentication. An attacker could exploit this vulnerability by directly connecting to the Graphite web interface. An exploit could allow the attacker to access various statistics and Key Performance Indicators (KPIs) regarding the Cisco Policy Suite environment.

N/A

访问控制不恰当

Cisco CPS 访问控制错误漏洞

Cisco Policy Suite（CPS）是美国思科（Cisco）公司的一套下一代策略管理解决方案。该方案提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。Policy and Charging Rules Function（PCRF）是其中的一个策略、规则设置功能组件。 Cisco CPS中的PCRF的Graphite Web界面存在访问控制错误漏洞，该漏洞该源于程序缺少身份验证检测。攻击者可通过直接连接到Graphite web界面利用该漏洞访问各种统计数据和有关Cisco Polic

N/A

N/A