PT-2013-5612 · Cisco · Cisco Identity Services Engine

Publicado 2013-10-25 · Atualizado 2013-10-25 · CVE-2013-5531

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (ISE) versions 1.x before 1.1.1

Description The issue allows remote attackers to bypass authentication and read sensitive data, including support-bundle configuration and credentials, by crafting a session on TCP port 443.

Recommendations For Cisco Identity Services Engine (ISE) versions 1.x before 1.1.1, update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 443 to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-5531

Produtos afetados

Cisco Identity Services Engine

Referências · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5531 · Nota de Segurança