cnvd - cnvd-2017-22162

CNVD-2017-22162

Vulnerability from cnvd - Published: 2017-08-21

Title

Cisco Policy Suite Software权限提升漏洞

Description

Cisco Policy Suite (CPS) Software是美国思科（Cisco）公司的一套下一代策略管理软件。该软件提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。shell user accounts是其中的一个账户管理组件。 CPS Software中的shell用户账户管理存在权限提升漏洞，该漏洞源于程序对shell用户账户实施了基于角色的错误的访问控制（RBAC）。本地攻击者可通过认证受影响的设备并提供特制的用户输入利用该漏洞在受影响的系统上获取提升的权限。

Severity

中

Patch Name

Cisco Policy Suite Software权限提升漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-6781

Impacted products

Name
['Cisco Policy Suite Software 9.0.0', 'Cisco Policy Suite Software 9.1.0', 'Cisco Policy Suite Software 10.0.0', 'Cisco Policy Suite Software 11.0.0', 'Cisco Policy Suite Software 12.0.0']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100365"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6781"
    }
  },
  "description": "Cisco Policy Suite (CPS) Software\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e0b\u4e00\u4ee3\u7b56\u7565\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u4e86\u57fa\u4e8e\u7528\u6237\u7684\u4e1a\u52a1\u89c4\u5219\u3001\u5e94\u7528\u7a0b\u5e8f\u548c\u7f51\u7edc\u8d44\u6e90\u7684\u5b9e\u65f6\u7ba1\u7406\u7b49\u529f\u80fd\u3002shell user accounts\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u8d26\u6237\u7ba1\u7406\u7ec4\u4ef6\u3002\r\n\r\nCPS Software\u4e2d\u7684shell\u7528\u6237\u8d26\u6237\u7ba1\u7406\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9shell\u7528\u6237\u8d26\u6237\u5b9e\u65bd\u4e86\u57fa\u4e8e\u89d2\u8272\u7684\u9519\u8bef\u7684\u8bbf\u95ee\u63a7\u5236\uff08RBAC\uff09\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8ba4\u8bc1\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5e76\u63d0\u4f9b\u7279\u5236\u7684\u7528\u6237\u8f93\u5165\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-22162",
  "openTime": "2017-08-21",
  "patchDescription": "Cisco Policy Suite (CPS) Software\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e0b\u4e00\u4ee3\u7b56\u7565\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u4e86\u57fa\u4e8e\u7528\u6237\u7684\u4e1a\u52a1\u89c4\u5219\u3001\u5e94\u7528\u7a0b\u5e8f\u548c\u7f51\u7edc\u8d44\u6e90\u7684\u5b9e\u65f6\u7ba1\u7406\u7b49\u529f\u80fd\u3002shell user accounts\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u8d26\u6237\u7ba1\u7406\u7ec4\u4ef6\u3002\r\n\r\nCPS Software\u4e2d\u7684shell\u7528\u6237\u8d26\u6237\u7ba1\u7406\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9shell\u7528\u6237\u8d26\u6237\u5b9e\u65bd\u4e86\u57fa\u4e8e\u89d2\u8272\u7684\u9519\u8bef\u7684\u8bbf\u95ee\u63a7\u5236\uff08RBAC\uff09\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8ba4\u8bc1\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5e76\u63d0\u4f9b\u7279\u5236\u7684\u7528\u6237\u8f93\u5165\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u83b7\u53d6\u63d0\u5347\u7684\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Policy Suite Software\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Policy Suite Software 9.0.0",
      "Cisco Policy Suite Software  9.1.0",
      "Cisco Policy Suite Software  10.0.0",
      "Cisco Policy Suite Software  11.0.0",
      "Cisco Policy Suite Software  12.0.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-6781",
  "serverity": "\u4e2d",
  "submitTime": "2017-08-18",
  "title": "Cisco Policy Suite Software\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

CVE-2017-6781 (GCVE-0-2017-6781)

Vulnerability from cvelistv5 – Published: 2017-08-17 20:00 – Updated: 2024-09-17 02:15

Summary

A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0.

Severity ?

No CVSS data available.

CWE

Privilege Escalation

Assigner

cisco

References

URL

Tags

	http://www.securityfocus.com/bid/100365	vdb-entryx_refsource_BID
	https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO

Impacted products

	Vendor	Product	Version
	Cisco Systems, Inc.	Policy Suite	Affected: 9.0.0 Affected: 9.1.0 Affected: 10.0.0 Affected: 11.0.0 Affected: 12.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:41:17.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100365",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100365"
          },
          {
            "name": "20170816 Cisco Policy Suite Privilege Escalation Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Policy Suite",
          "vendor": "Cisco Systems, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.0"
            },
            {
              "status": "affected",
              "version": "9.1.0"
            },
            {
              "status": "affected",
              "version": "10.0.0"
            },
            {
              "status": "affected",
              "version": "11.0.0"
            },
            {
              "status": "affected",
              "version": "12.0.0"
            }
          ]
        }
      ],
      "datePublic": "2017-08-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-18T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "100365",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100365"
        },
        {
          "name": "20170816 Cisco Policy Suite Privilege Escalation Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2017-08-16T00:00:00",
          "ID": "CVE-2017-6781",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Policy Suite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "9.0.0"
                          },
                          {
                            "version_value": "9.1.0"
                          },
                          {
                            "version_value": "10.0.0"
                          },
                          {
                            "version_value": "11.0.0"
                          },
                          {
                            "version_value": "12.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco Systems, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to incorrect role-based access control (RBAC) for shell user accounts. An attacker could exploit this vulnerability by authenticating to an affected appliance and providing crafted user input via the CLI. A successful exploit could allow the attacker to acquire a higher privilege level than should have been granted. To exploit this vulnerability, the attacker must log in to the appliance with valid credentials. Cisco Bug IDs: CSCve37724. Known Affected Releases: 9.0.0, 9.1.0, 10.0.0, 11.0.0, 12.0.0."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100365",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100365"
            },
            {
              "name": "20170816 Cisco Policy Suite Privilege Escalation Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-cps"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2017-6781",
    "datePublished": "2017-08-17T20:00:00Z",
    "dateReserved": "2017-03-09T00:00:00",
    "dateUpdated": "2024-09-17T02:15:39.209Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2017-22162

CVE-2017-6781 (GCVE-0-2017-6781)

Tags

Sightings

Nomenclature