CVE-2011-3290 Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via....
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine | All versions | No fix listed |
| cisco identity services engine software | <= 1.0.4 | No fix listed |
| cisco identity services engine software | = 1.0 | No fix listed |
| cisco identity services engine software | = 1.0mr | No fix listed |
References
- 46061 third-party-advisory
- 20110920 Cisco Identity Services Engine Database Default Credentials Vulnerability vendor-advisory
- 49703 vdb-entry
- 1026075 vdb-entry
- cisco-ise-default-credentials(69945) vdb-entry