Cisco NX-OS Software CVE-2019-1602 Local Insecure File Permissions Vulnerability

Bugtraq ID:	107332
Class:	Design Error
CVE:	CVE-2019-1602
Remote:	No
Local:	Yes
Published:	Mar 06 2019 12:00AM
Updated:	Mar 06 2019 12:00AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 9.2(1) Cisco NX-OS 9.2 Cisco NX-OS 7.0(3)I7 Cisco NX-OS 7.0(3)I6 Cisco NX-OS 7.0(3)I5 Cisco NX-OS 7.0(3)I4 Cisco NX-OS 7.0(3)F3 Cisco NX-OS 7.0(3)F2 Cisco NX-OS 7.0(3)F1 Cisco NX-OS 6.0 Cisco Nexus 9500 R-Series Line Cards and Fabric Modules 0 Cisco Nexus 9000 Series Switches in standalone NX-OS mode 0 Cisco Nexus 3600 Platform Switches 0 Cisco Nexus 3500 Platform Switches 0 Cisco Nexus 3000 Series Switches 0
Not Vulnerable:	Cisco NX-OS 9.2(2) Cisco NX-OS 7.0(3)I7(6) Cisco NX-OS 7.0(3)F3(5) Cisco NX-OS 6.0(2)A8(11)

Cisco NX-OS Software CVE-2019-1602 Local Insecure File Permissions Vulnerability

Cisco NX-OS Software is prone to local insecure file-permissions vulnerability.

A local attacker can exploit this issue to gain elevated privileges on an affected system.

This issue is being tracked by Cisco bug ID CSCvj59009 and CSCvk70659.