cnvd - cnvd-2017-22162

cnvd-2017-22162

Vulnerability from cnvd

Title: Cisco Policy Suite Software权限提升漏洞

Description:

Cisco Policy Suite (CPS) Software是美国思科（Cisco）公司的一套下一代策略管理软件。该软件提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。shell user accounts是其中的一个账户管理组件。

CPS Software中的shell用户账户管理存在权限提升漏洞，该漏洞源于程序对shell用户账户实施了基于角色的错误的访问控制（RBAC）。本地攻击者可通过认证受影响的设备并提供特制的用户输入利用该漏洞在受影响的系统上获取提升的权限。

Severity: 中

Patch Name: Cisco Policy Suite Software权限提升漏洞的补丁

Patch Description:

CPS Software中的shell用户账户管理存在权限提升漏洞，该漏洞源于程序对shell用户账户实施了基于角色的错误的访问控制（RBAC）。本地攻击者可通过认证受影响的设备并提供特制的用户输入利用该漏洞在受影响的系统上获取提升的权限。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-6781

Impacted products

Name
['Cisco Policy Suite Software 9.0.0', 'Cisco Policy Suite Software 9.1.0', 'Cisco Policy Suite Software 10.0.0', 'Cisco Policy Suite Software 11.0.0', 'Cisco Policy Suite Software 12.0.0']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100365"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6781"
    }
  },
  "description": "Cisco Policy Suite (CPS) Software\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e0b\u4e00\u4ee3\u7b56\u7565\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u4e86\u57fa\u4e8e\u7528\u6237\u7684\u4e1a\u52a1\u89c4\u5219\u3001\u5e94\u7528\u7a0b\u5e8f\u548c\u7f51\u7edc\u8d44\u6e90\u7684\u5b9e\u65f6\u7ba1\u7406\u7b49\u529f\u80fd\u3002shell user accounts\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u8d26\u6237\u7ba1\u7406\u7ec4\u4ef6\u3002\r\n\r\nCPS Software\u4e2d\u7684shell\u7528\u6237\u8d26\u6237\u7ba1\u7406\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9shell\u7528\u6237\u8d26\u6237\u5b9e\u65bd\u4e86\u57fa\u4e8e\u89d2\u8272\u7684\u9519\u8bef\u7684\u8bbf\u95ee\u63a7\u5236\uff08RBAC\uff09\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8ba4\u8bc1\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5e76\u63d0\u4f9b\u7279\u5236\u7684\u7528\u6237\u8f93\u5165\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-22162",
  "openTime": "2017-08-21",
  "patchDescription": "Cisco Policy Suite (CPS) Software\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e0b\u4e00\u4ee3\u7b56\u7565\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u4e86\u57fa\u4e8e\u7528\u6237\u7684\u4e1a\u52a1\u89c4\u5219\u3001\u5e94\u7528\u7a0b\u5e8f\u548c\u7f51\u7edc\u8d44\u6e90\u7684\u5b9e\u65f6\u7ba1\u7406\u7b49\u529f\u80fd\u3002shell user accounts\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u8d26\u6237\u7ba1\u7406\u7ec4\u4ef6\u3002\r\n\r\nCPS Software\u4e2d\u7684shell\u7528\u6237\u8d26\u6237\u7ba1\u7406\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9shell\u7528\u6237\u8d26\u6237\u5b9e\u65bd\u4e86\u57fa\u4e8e\u89d2\u8272\u7684\u9519\u8bef\u7684\u8bbf\u95ee\u63a7\u5236\uff08RBAC\uff09\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8ba4\u8bc1\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5e76\u63d0\u4f9b\u7279\u5236\u7684\u7528\u6237\u8f93\u5165\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Policy Suite Software\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Policy Suite Software 9.0.0",
      "Cisco Policy Suite Software  9.1.0",
      "Cisco Policy Suite Software  10.0.0",
      "Cisco Policy Suite Software  11.0.0",
      "Cisco Policy Suite Software  12.0.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-6781",
  "serverity": "\u4e2d",
  "submitTime": "2017-08-18",
  "title": "Cisco Policy Suite Software\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

CVE-2017-6781 (GCVE-0-2017-6781)

Vulnerability from cvelistv5

Published

2017-08-17 20:00

Modified

2024-09-17 02:15

Severity ?

CWE

Privilege Escalation

Summary

A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/100365	vdb-entry, x_refsource_BID
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps	vendor-advisory, x_refsource_CISCO

Impacted products

	Vendor	Product	Version
	Cisco Systems, Inc.	Policy Suite	Version: 9.0.0 Version: 9.1.0 Version: 10.0.0 Version: 11.0.0 Version: 12.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:41:17.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100365",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100365"
          },
          {
            "name": "20170816 Cisco Policy Suite Privilege Escalation Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Policy Suite",
          "vendor": "Cisco Systems, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.0"
            },
            {
              "status": "affected",
              "version": "9.1.0"
            },
            {
              "status": "affected",
              "version": "10.0.0"
            },
            {
              "status": "affected",
              "version": "11.0.0"
            },
            {
              "status": "affected",
              "version": "12.0.0"
            }
          ]
        }
      ],
      "datePublic": "2017-08-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-18T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "100365",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100365"
        },
        {
          "name": "20170816 Cisco Policy Suite Privilege Escalation Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2017-08-16T00:00:00",
          "ID": "CVE-2017-6781",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Policy Suite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "9.0.0"
                          },
                          {
                            "version_value": "9.1.0"
                          },
                          {
                            "version_value": "10.0.0"
                          },
                          {
                            "version_value": "11.0.0"
                          },
                          {
                            "version_value": "12.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco Systems, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100365",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100365"
            },
            {
              "name": "20170816 Cisco Policy Suite Privilege Escalation Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2017-6781",
    "datePublished": "2017-08-17T20:00:00Z",
    "dateReserved": "2017-03-09T00:00:00",
    "dateUpdated": "2024-09-17T02:15:39.209Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted