CVE-2018-15466
Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jan 11, 2019
- Updated
- Nov 19, 2024
- Reserved
- Aug 17, 2018
Description
A vulnerability in the Graphite web interface of the Policy and Charging Rules Function (PCRF) of Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The vulnerability is due to lack of authentication. An attacker could exploit this vulnerability by directly connecting to the Graphite web interface. An exploit could allow the attacker to access various statistics and Key Performance Indicators (KPIs) regarding the Cisco Policy Suite environment.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco Policy Suite (CPS) SoftwareCisco |
|
References
- 20190109 Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerabilityvendor-advisory
- 106517vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.