CVE-2015-4182 The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change...
MediumCVSS 5.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.0.4.573 | No fix listed |
| cisco identity services engine software | = 1.0_base | No fix listed |
| cisco identity services engine software | = 1.1 | No fix listed |
| cisco identity services engine software | = 1.2 | No fix listed |
| cisco identity services engine software | = 1.2(0.747) | No fix listed |
| cisco identity services engine software | = 1.2(0.899) | No fix listed |
| cisco identity services engine software | = 1.2(1.901) | No fix listed |
| cisco identity services engine software | = 1.3 | No fix listed |
| cisco identity services engine software | = 1.4 | No fix listed |
References
- 20150611 Cisco Identity Services Engine Improper Web Page Controls Privilege Escalation Vulnerability vendor-advisory
- 75152 third-party-advisory vdb-entry
- 1032579 third-party-advisory vdb-entry