CVE-2017-3835

published 2017-02-22

CVE-2017-3835: A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other…

high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	identity_services_engine	—	—
cisco	identity_services_engine_software	—	—

CWE-89