Lucene search
CiscoCVE-2013-5539HistoryOct 16, 2013 - 10:52 a.m.
CVE-2013-5539
2013-10-1610:52:45
CWE-20
cisco
web.nvd.nist.gov
27
cisco
ise
upload-dialog
file upload
authenticated users
arbitrary file type
security vulnerability
cve-2013-5539
nvd
cisco identity services engine
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.6
Confidence
High
EPSS
0.003
Percentile
69.6%
The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.
Affected configurations
Node
ciscoidentity_services_engine_softwareMatch-
ciscoidentity_services_engineMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | identity_services_engine_software | - | cpe:2.3:a:cisco:identity_services_engine_software:-:*:*:*:*:*:*:* |
| cisco | identity_services_engine | - | cpe:2.3:h:cisco:identity_services_engine:-:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2013-10-16 10:52:00
cvelist
cvelist
CVE-2013-5539
2013-10-16 10:00:00
cisco
cisco
Cisco Identity Services Engine Untrusted File Upload Vulnerability
2013-10-16 20:19:44
nvd
nvd
CVE-2013-5539
2013-10-16 10:52:45
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.6
Confidence
High
EPSS
0.003
Percentile
69.6%
Related for CVE-2013-5539