Lucene search
CiscoCVE-2015-4267HistoryJul 15, 2015 - 6:59 p.m.
CVE-2015-4267
2015-07-1518:59:00
CWE-352
cisco
web.nvd.nist.gov
33
cve-2015-4267
csrf vulnerability
cisco
ise
nvd
bug id cscus09940
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
32.7%
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
Affected configurations
Node
ciscoidentity_services_engine_softwareMatch1.2\(0.793\)
ORciscoidentity_services_engine_softwareMatch1.3\(0.876\)
ORciscoidentity_services_engine_softwareMatch1.4\(0.181\)
ORciscoidentity_services_engine_softwareMatch1.4\(0.876\)
ORciscoidentity_services_engine_softwareMatch2.0\(0.147\)
ORciscoidentity_services_engine_softwareMatch2.0\(0.169\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | identity_services_engine_software | 1.2(0.793) | cpe:2.3:a:cisco:identity_services_engine_software:1.2\(0.793\):*:*:*:*:*:*:* |
| cisco | identity_services_engine_software | 1.3(0.876) | cpe:2.3:a:cisco:identity_services_engine_software:1.3\(0.876\):*:*:*:*:*:*:* |
| cisco | identity_services_engine_software | 1.4(0.181) | cpe:2.3:a:cisco:identity_services_engine_software:1.4\(0.181\):*:*:*:*:*:*:* |
| cisco | identity_services_engine_software | 1.4(0.876) | cpe:2.3:a:cisco:identity_services_engine_software:1.4\(0.876\):*:*:*:*:*:*:* |
| cisco | identity_services_engine_software | 2.0(0.147) | cpe:2.3:a:cisco:identity_services_engine_software:2.0\(0.147\):*:*:*:*:*:*:* |
| cisco | identity_services_engine_software | 2.0(0.169) | cpe:2.3:a:cisco:identity_services_engine_software:2.0\(0.169\):*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-4267
2015-07-15 18:00:00
cisco
cisco
Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability
2015-07-15 00:12:15
prion
prion
Cross site request forgery (csrf)
2015-07-15 18:59:00
nvd
nvd
CVE-2015-4267
2015-07-15 18:59:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
32.7%
Related for CVE-2015-4267