CVE-2016-1357

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-03-03 · updated 2026-06-17
Weakness: CWE-200

Description

The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allows remote attackers to bypass intended RBAC restrictions and read unspecified data via unknown vectors, aka Bug ID CSCut85211.

Affected products

Cisco Policy Suite: 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, 7.0.5

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-psc

Get alerted when CVE-2016-1357 or the next vulnerability affects your stack