CVE-2018-0096 Missing authorization in Cisco Prime Infrastructure
Authenticated attackers can bypass RBAC to view and modify configurations in other virtual domains within Cisco Prime Infrastructure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0096?
CVE-2018-0096 is a medium-severity missing authorization vulnerability in Cisco Prime Infrastructure, published on 18 Jan 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to perform a privilege escalation in which one virtual domain user can view and modify another virtual domain configuration. The vulnerability is due to a failure to properly enforce RBAC for virtual domains. An attacker could exploit this vulnerability by sending an authenticated, crafted HTTP request to a targeted application. An exploit could allow the attacker to bypass RBAC policies on the targeted system to modify a virtual domain and access resources that are not normally accessible. Cisco Bug IDs: CSCvg36875.
Which versions are affected by CVE-2018-0096?
It affects 1 product.
Products include Cisco Prime Infrastructure.
How do I fix CVE-2018-0096?
No fix has been published for CVE-2018-0096 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2018-0096 being exploited?
There is no known exploitation of CVE-2018-0096 in the wild and no public exploit code.
Other vulnerabilities in Cisco Prime Infrastructure
Sources
Also known as GHSA-659r-jw2p-4vqj.