Published: 24/06/2015 Updated: 29/12/2016

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Cisco Secure Access Control System prior to 5.4(0.46.2) and 5.5 prior to 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco secure access control system
cisco secure access control system 5.3.0.40.5
cisco identity services engine software 1.0.4.573

A vulnerability in Cisco Identity Services Engine and Secure Access Control System could allow an authenticated, remote attacker to gain unauthorized access to program data The vulnerability is due to weak authentication and authorization used to control access to support bundles stored on a targeted device An authenticated, remote attacker coul ...

CWE-264 CWE-200 http://tools.cisco.com/security/center/viewAlert.x?alertId=39501 http://www.securityfocus.com/bid/75379 http://www.securitytracker.com/id/1032714 http://www.securitytracker.com/id/1032713 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150623-CVE-2015-4219

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-4219

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect