CVE-2016-1402

HIGH

Cisco ISE <1.2.0.899 - DoS

Title source: llm

Description

The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815.

References (2)

[Vendor Advisory] http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ise

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1035946

Scores

CVSS v3 7.5

EPSS 0.0109

EPSS Percentile 77.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-119 CWE-287

Status draft

Affected Products (6)

cisco/identity_services_engine_software

Timeline

Published May 21, 2016

Tracked Since Feb 18, 2026