Cisco Policy Suite CVE-2018-0089 Information Disclosure Vulnerability

Cisco Policy Suite is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCvf77666.

Information

Bugtraq ID: 102758
Class: Design Error
CVE: CVE-2018-0089

Remote: Yes
Local: No
Published: Jan 23 2018 12:00AM
Updated: Jan 23 2018 12:00AM
Credit: The vendor reported this issue.
Vulnerable: Cisco Policy Suite Software 0
Cisco Mobility Services Engine 11.1
Cisco Mobility Services Engine 11.0
Cisco Mobility Services Engine 10.0

Not Vulnerable:

Exploit

An attacker can exploit this issue using readily available tools.

References:

• Cisco Homepage (Cisco)
  
• Cisco Policy Suite Unauthenticated Information Disclosure Vulnerability (Cisco)
  

Source: www.securityfocus.com