CVE-2013-5538

2013-10-1610:00:00

cisco

www.cve.org

cisco identity services engine

weak permissions

uploaded files

remote attack

vulnerability

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

65.0%

JSON

The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5538