CVE-2016-1402 The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a d...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity services engine software | = 1.2.0.899-p1 | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p2 | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p3 | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p4 | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p5 | No fix listed |
| cisco identity services engine software | = 1.2.0.899-p6 | No fix listed |