Policy Suite
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:policy_suite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Policy Suite (86e1624b-488f-56d2-9d68-4821a57be985) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-40119 |
vulnerable | 2026-06-08 05:35:16.904474 |
Cisco Policy Suite Static SSH Keys Vulnerability
CRITICAL (9.8)
A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this vulnerability by extracting a key from a system under their control. A successful exploit could allow the attacker to log in to an affected system as the root user.
Published: 2021-11-04T15:35:50.764Z
Updated: 2024-11-07T21:51:43.689Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0377 |
vulnerable | 2026-06-08 05:10:23.533484 |
Details available
A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to directly connect to the OSGi interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by directly connecting to the OSGi interface. An exploit could allow the attacker to access or change any files that are accessible by the OSGi process. Cisco Bug IDs: CSCvh18017.
Published: 2018-07-18T23:00:00.000Z
Updated: 2024-11-29T14:51:07.573Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0376 |
vulnerable | 2026-06-08 05:10:23.532937 |
Details available
A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by accessing the Policy Builder interface. A successful exploit could allow the attacker to make changes to existing repositories and create new repositories. Cisco Bug IDs: CSCvi35109.
Published: 2018-07-18T23:00:00.000Z
Updated: 2024-11-29T14:51:16.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0375 |
vulnerable | 2026-06-08 05:10:23.530764 |
Details available
A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an affected system using the root account, which has default, static user credentials. The vulnerability is due to the presence of undocumented, static user credentials for the root account. An attacker could exploit this vulnerability by using the account to log in to an affected system. An exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user. Cisco Bug IDs: CSCvh02680.
Published: 2018-07-18T23:00:00.000Z
Updated: 2024-11-29T14:51:25.926Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.