CVEvulnerability
CVE-2011-3290
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-09-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.
Affected configurations
• cisco identity services engine
• cisco identity services engine software (<= 1.0.4)
• cisco identity services engine software 1.0
• cisco identity services engine software 1.0mr
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/46061 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml Vendor Advisory
- http://www.securityfocus.com/bid/49703 www.securityfocus.com
- http://www.securitytracker.com/id?1026075 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69945 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/46061 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml Vendor Advisory
- http://www.securityfocus.com/bid/49703 www.securityfocus.com
- http://www.securitytracker.com/id?1026075 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69945 exchange.xforce.ibmcloud.com