CVE-2015-6323 The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative...
CriticalCVSS 9.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.1.1 | No fix listed |
| cisco identity services engine software | = 1.1.1-p1 | No fix listed |
| cisco identity services engine software | = 1.1.1-p2 | No fix listed |
| cisco identity services engine software | = 1.1.1-p3 | No fix listed |
| cisco identity services engine software | = 1.1.1-p4 | No fix listed |
| cisco identity services engine software | = 1.1.1-p5 | No fix listed |
| cisco identity services engine software | = 1.1.1-p6 | No fix listed |
| cisco identity services engine software | = 1.1.2 | No fix listed |
| cisco identity services engine software | = 1.1.2-p1 | No fix listed |
| cisco identity services engine software | = 1.1.2-p2 | No fix listed |
| cisco identity services engine software | = 1.1.2-p3 | No fix listed |
| cisco identity services engine software | = 1.1.2-p4 | No fix listed |
| cisco identity services engine software | = 1.1.2-p5 | No fix listed |
| cisco identity services engine software | = 1.1.2-p6 | No fix listed |
| cisco identity services engine software | = 1.1.2-p7 | No fix listed |
| cisco identity services engine software | = 1.1.2-p8 | No fix listed |
| cisco identity services engine software | = 1.1.2-p9 | No fix listed |
| cisco identity services engine software | = 1.1.3 | No fix listed |
| cisco identity services engine software | = 1.1.3-p1 | No fix listed |
| cisco identity services engine software | = 1.1.3-p2 | No fix listed |
| cisco identity services engine software | = 1.1.3-p3 | No fix listed |
| cisco identity services engine software | = 1.1.3-p4 | No fix listed |
| cisco identity services engine software | = 1.1.3-p5 | No fix listed |
| cisco identity services engine software | = 1.1.3-p6 | No fix listed |
| cisco identity services engine software | = 1.1.3-p7 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.1.4 | No fix listed |
| cisco identity services engine software | = 1.1.4-p1 | No fix listed |
| cisco identity services engine software | = 1.1.4-p2 | No fix listed |
| cisco identity services engine software | = 1.1.4-p3 | No fix listed |
| cisco identity services engine software | = 1.1.4-p4 | No fix listed |
| cisco identity services engine software | = 1.1.4-p5 | No fix listed |
| cisco identity services engine software | = 1.1.4-p6 | No fix listed |
| cisco identity services engine software | = 1.1.4-p7 | No fix listed |
| cisco identity services engine software | = 1.1_base | No fix listed |
| cisco identity services engine software | = 1.2(0.747) | No fix listed |
| cisco identity services engine software | = 1.2(0.793) | No fix listed |
| cisco identity services engine software | = 1.2(1.198) | No fix listed |
| cisco identity services engine software | = 1.2(1.901) | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p14 | No fix listed |
| cisco identity services engine software | = 1.2.1 | No fix listed |
| cisco identity services engine software | = 1.2.1-p1 | No fix listed |
| cisco identity services engine software | = 1.2.1-p2 | No fix listed |
| cisco identity services engine software | = 1.2_base | No fix listed |
| cisco identity services engine software | = 1.3(0.722) | No fix listed |
| cisco identity services engine software | = 1.3(0.876) | No fix listed |
| cisco identity services engine software | = 1.3(106.146) | No fix listed |
| cisco identity services engine software | = 1.3(120.135) | No fix listed |
| cisco identity services engine software | = 1.4(0.109) | No fix listed |
| cisco identity services engine software | = 1.4(0.181) | No fix listed |
| cisco identity services engine software | = 1.4(0.253) | No fix listed |
References
- 20160113 Cisco Identity Services Engine Unauthorized Access Vulnerability vendor-advisory
- 1034666 vdb-entry