CVE:CVE-2018-0393
CNNVD:CNNVD-201807-1290
Cisco Policy Suite（CPS）是美国思科（Cisco）公司的一套下一代策略管理解决方案。该方案提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。
Cisco Policy Suite中的Policy Builder界面存在安全漏洞，该漏洞源于程序没有充分的执行授权控制。远程攻击者可通过访问Policy Builder界面并修改HTTP请求利用该漏洞更改现有的策略。
solution:Upgrade cisco mobility_services_engine_3365_firmware to a higher version than 18.0.0,and avoid the version 18.0.0; Upgrade cisco mobility_services_engine_3355_firmware to a higher version than 18.0.0,and avoid the version 18.0.0; Upgrade cisco mobility_services_engine_3310_firmware to a higher version than 18.0.0,and avoid the version 18.0.0