CVE-2015-4182

Cisco Identity Services Engine Software - Authenticated Access Control Bypass

Title source: llm
STIX 2.1

Description

The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/75152
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39299
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032579

Scores

EPSS 0.0209
EPSS Percentile 79.7%

Details

CWE
CWE-264
Status published
Products (9)
cisco/identity_services_engine_software 1.0.4.573
cisco/identity_services_engine_software 1.0_base
cisco/identity_services_engine_software 1.1
cisco/identity_services_engine_software 1.2
cisco/identity_services_engine_software 1.2\(0.747\)
cisco/identity_services_engine_software 1.2\(0.899\)
cisco/identity_services_engine_software 1.2\(1.901\)
cisco/identity_services_engine_software 1.3
cisco/identity_services_engine_software 1.4
Published Jun 12, 2015
Tracked Since Feb 18, 2026