Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9f58-w643-6379

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.

The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.

EPSS

Процентиль: 49%
0.00261
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 10 лет назад

The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.

fstec
больше 10 лет назад

Уязвимость платформы управления политиками соединений Cisco Identity Services Engine, позволяющая нарушителю получить конфиденциальную информацию

EPSS

Процентиль: 49%
0.00261
Низкий

Дефекты

CWE-200