CVEvulnerability
CVE-2013-3471
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515.
Affected configurations
• cisco identity services engine software
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3471 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30524 Vendor Advisory
- http://www.securitytracker.com/id/1028965 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3471 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30524 Vendor Advisory
- http://www.securitytracker.com/id/1028965 Third Party Advisory, VDB Entry