high8.8
CVE-2017-3835
A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other us…
Impact
A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Identity Services Engine Software | Version 1.4\(0.908\) |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96249
- http://www.securitytracker.com/id/1037841
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ise
- http://www.securityfocus.com/bid/96249
- http://www.securitytracker.com/id/1037841
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ise