Cisco Policy Suite CVE-2017-6623 Local Privilege Escalation Vulnerability

Bugtraq ID:	98521
Class:	Input Validation Error
CVE:	CVE-2017-6623
Remote:	No
Local:	Yes
Published:	May 17 2017 12:00AM
Updated:	May 17 2017 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Policy Suite (CPS) 11.0 Cisco Policy Suite (CPS) 10.1 Cisco Policy Suite (CPS) 10.0
Not Vulnerable:	Cisco Policy Suite (CPS) 12.1 Cisco Policy Suite (CPS) 12.0 Cisco Policy Suite (CPS) 11.1

Cisco Policy Suite CVE-2017-6623 Local Privilege Escalation Vulnerability

Cisco Policy Suite is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to gain elevated root privileges on the device.

This issue is being tracked by Cisco Bug ID CSCvc07366.

Cisco Policy Suite CVE-2017-6623 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Policy Suite CVE-2017-6623 Local Privilege Escalation Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Policy Suite Privilege Escalation Vulnerability (Cisco)