CVE-2012-3908

CWE-352 — Cross-Site Request Forgery (CSRF)5 documents5 sources
Severity
6.8MEDIUM
EPSS
0.1%
top 65.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Identity Services EngineCisco Identity Services Engine Software
Timeline
PublishedSep 16
Latest updateMay 17

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators, aka Bug ID CSCty46684.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-mvch-jg7v-pvrx: Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity↗2022-05-17
▶
CVEList
CVE-2012-3908: Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity↗2012-09-16
▶

📋Vendor Advisories

1
Cisco
Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability↗2012-09-20
▶
CVE-2012-3908 (MEDIUM CVSS 6.8) | Multiple cross-site request forgery | cvebase.io