CVE-2013-5539

2013-10-1610:00:00

cisco

www.cve.org

cisco identity services engine

remote upload vulnerability

arbitrary file type

bug id cscui67511

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

53.7%

JSON

The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5539