PT-2011-4372 · Cisco+1 · Cisco Identity Services Engine+1

Published 2011-09-21 · Updated 2017-08-29 · CVE-2011-3290

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (ISE) versions prior to 1.0.4.MR2

Description The issue allows remote attackers to modify settings or perform other administrative actions due to default Oracle database credentials.

Recommendations For versions prior to 1.0.4.MR2, update to version 1.0.4.MR2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2011-3290

Affected Products

Cisco Identity Services Engine

Oracle Database

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-3290 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml · Vendor Advisory
• http://securityfocus.com/bid/49703 · Note
• http://secunia.com/advisories/46061 · Note
• http://securitytracker.com/id?1026075 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69945 · Note