CVE-2018-0267 : A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacke

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive data that should be restricted. This could include LDAP credentials. The vulnerability is due to insufficient protection of database tables over the web interface. An attacker could exploit this vulnerability by browsing to a specific URL. An exploit could allow the attacker to view sensitive information that should have been restricted. Cisco Bug IDs: CSCvf22116.

Published 2018-04-19 20:29:02

Updated 2020-09-04 18:29:23

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2018-0267

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0267

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	2.0	4.0	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2018-0267

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: ykramarz@cisco.com (Secondary)

CWE-425 Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-0267

http://www.securityfocus.com/bid/103937

Cisco Unified Communications Manager CVE-2018-0267 Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1040719

Cisco Unified Communications Manager Flaw Lets Local Users Obtain LDAP Credentials - SecurityTracker
Third Party Advisory;VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ucm1

Cisco Unified Communications Manager LDAP Information Disclosure Vulnerability
Vendor Advisory

Products affected by CVE-2018-0267

Cisco » Unified Communications Manager » Version: 10.5(2.10000.5)
cpe:2.3:a:cisco:unified_communications_manager:10.5\(2.10000.5\):*:*:*:*:*:*:*
Matching versions
Cisco » Unified Communications Manager » Version: 11.5(1.10000.6)
cpe:2.3:a:cisco:unified_communications_manager:11.5\(1.10000.6\):*:*:*:*:*:*:*
Matching versions
Cisco » Unified Communications Manager » Version: 11.0(1.10000.10)
cpe:2.3:a:cisco:unified_communications_manager:11.0\(1.10000.10\):*:*:*:*:*:*:*
Matching versions
Cisco » Unified Communications Manager » Version: 12.0(1.10000.10)
cpe:2.3:a:cisco:unified_communications_manager:12.0\(1.10000.10\):*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-0267

Exploit prediction scoring system (EPSS) score for CVE-2018-0267

CVSS scores for CVE-2018-0267

CWE ids for CVE-2018-0267

References for CVE-2018-0267

Products affected by CVE-2018-0267