CVE-2013-5531

Description

Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support-bundle configuration and credentials data, via a crafted session on TCP port 443, aka Bug ID CSCty20405.

Risk Information

Base Score
5.3
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
0.248

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities in Cisco Identity Services Engine For Cisco Identity Services EngineNCM
Improper Authentication Vulnerability (CVE-2013-5531)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1706002Security Update for Cisco Identity Services Engine 2.0(0.905)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234