CVE-2013-5538
Cisco Identity Services Engine - Unauthenticated Arbitrary File Read via Sponsor Portal Uploaded Files
Title source: llmDescription
The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5538
Scores
EPSS
0.0119
EPSS Percentile
64.6%
Details
CWE
CWE-264
Status
published
Products (2)
cisco/identity_services_engine
cisco/identity_services_engine_software
Published
Oct 16, 2013
Tracked Since
Feb 18, 2026