CVEvulnerability
CVE-2015-4182
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.
Affected configurations
• cisco identity services engine software 1.0.4.573
• cisco identity services engine software 1.0 base
• cisco identity services engine software 1.1
• cisco identity services engine software 1.2
• cisco identity services engine software 1.2\(0.747\)
• cisco identity services engine software 1.2\(0.899\)
• cisco identity services engine software 1.2\(1.901\)
• cisco identity services engine software 1.3
• cisco identity services engine software 1.4
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39299 Vendor Advisory
- http://www.securityfocus.com/bid/75152 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032579 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39299 Vendor Advisory
- http://www.securityfocus.com/bid/75152 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032579 Third Party Advisory, VDB Entry