CVE-2018-0376

A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by accessing the Policy Builder interface. A successful exploit could allow the attacker to make changes to existing repositories and create new repositories. Cisco Bug IDs: CSCvi35109.

• CWE-306
• CWE-306

• http://www.securityfocus.com/bid/104849Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-pspb-unauth-accessVendor Advisory
• http://www.securityfocus.com/bid/104849Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-pspb-unauth-accessVendor Advisory

Published

Jul 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0370A vulnerability in the detection engine of Cisco Firepower S…
• CVE-2018-0371A vulnerability in the Web Admin Interface of Cisco Meeting …
• CVE-2018-0372A vulnerability in the DHCPv6 feature of the Cisco Nexus 900…
• CVE-2018-0373A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva6…
• CVE-2018-0374A vulnerability in the Policy Builder database of Cisco Poli…
• CVE-2018-0375A vulnerability in the Cluster Manager of Cisco Policy Suite…
• CVE-2018-0377A vulnerability in the Open Systems Gateway initiative (OSGi…
• CVE-2018-0378A vulnerability in the Precision Time Protocol (PTP) feature…8.6
• CVE-2018-0379Multiple vulnerabilities exist in the Cisco Webex Network Re…
• CVE-2018-0380Multiple vulnerabilities exist in the Cisco Webex Network Re…
• CVE-2018-0381A vulnerability in the Cisco Aironet Series Access Points (A…6.8
• CVE-2018-0382A vulnerability in the session identification management fun…5.3