CVE-2015-4267 | BDVDB-2026-70482 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1032929
http://tools.cisco.com/security/center/viewAlert.x?alertId=39872

Exploit#

No public exploit known

History#

Version 12015-07-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.