CVE-2015-6317 Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
MediumCVSS 6.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.0.4.573 | No fix listed |
| cisco identity services engine software | = 1.0_base | No fix listed |
| cisco identity services engine software | = 1.0_mr_base | No fix listed |
| cisco identity services engine software | = 1.1.1-p1 | No fix listed |
| cisco identity services engine software | = 1.1.1-p2 | No fix listed |
| cisco identity services engine software | = 1.1.1-p3 | No fix listed |
| cisco identity services engine software | = 1.1.1-p4 | No fix listed |
| cisco identity services engine software | = 1.1.1-p5 | No fix listed |
| cisco identity services engine software | = 1.1.1-p6 | No fix listed |
| cisco identity services engine software | = 1.1.2-p1 | No fix listed |
| cisco identity services engine software | = 1.1.2-p2 | No fix listed |
| cisco identity services engine software | = 1.1.2-p3 | No fix listed |
| cisco identity services engine software | = 1.1.2-p4 | No fix listed |
| cisco identity services engine software | = 1.1.2-p5 | No fix listed |
| cisco identity services engine software | = 1.1.2-p6 | No fix listed |
| cisco identity services engine software | = 1.1.2-p7 | No fix listed |
| cisco identity services engine software | = 1.1.2-p8 | No fix listed |
| cisco identity services engine software | = 1.1.2-p9 | No fix listed |
| cisco identity services engine software | = 1.1.3-p1 | No fix listed |
| cisco identity services engine software | = 1.1.3-p2 | No fix listed |
| cisco identity services engine software | = 1.1.3-p3 | No fix listed |
| cisco identity services engine software | = 1.1.3-p4 | No fix listed |
| cisco identity services engine software | = 1.1.3-p5 | No fix listed |
| cisco identity services engine software | = 1.1.3-p6 | No fix listed |
| cisco identity services engine software | = 1.1.3-p7 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.1.4-p1 | No fix listed |
| cisco identity services engine software | = 1.1.4-p2 | No fix listed |
| cisco identity services engine software | = 1.1.4-p3 | No fix listed |
| cisco identity services engine software | = 1.1.4-p4 | No fix listed |
| cisco identity services engine software | = 1.1.4-p5 | No fix listed |
| cisco identity services engine software | = 1.1.4-p6 | No fix listed |
| cisco identity services engine software | = 1.1.4-p7 | No fix listed |
| cisco identity services engine software | = 1.1_base | No fix listed |
| cisco identity services engine software | = 1.2(0.747) | No fix listed |
| cisco identity services engine software | = 1.2(0.793) | No fix listed |
| cisco identity services engine software | = 1.2(1.198) | No fix listed |
| cisco identity services engine software | = 1.2(1.901) | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p14 | No fix listed |
| cisco identity services engine software | = 1.2.1-p1 | No fix listed |
| cisco identity services engine software | = 1.2.1-p2 | No fix listed |
| cisco identity services engine software | = 1.2_base | No fix listed |
| cisco identity services engine software | = 1.3(0.722) | No fix listed |
| cisco identity services engine software | = 1.3(0.876) | No fix listed |
| cisco identity services engine software | = 1.3(106.146) | No fix listed |
| cisco identity services engine software | = 1.3(120.135) | No fix listed |
| cisco identity services engine software | = 1.4(0.109) | No fix listed |
| cisco identity services engine software | = 1.4(0.181) | No fix listed |
| cisco identity services engine software | = 1.4(0.253) | No fix listed |
References
- 20160113 Cisco Identity Services Engine Unauthorized Access Vulnerability vendor-advisory
- 1034767 vdb-entry