Cisco Identity Services Engine CVE-2017-6747 Authentication Bypass Vulnerability

Bugtraq ID:	100105
Class:	Access Validation Error
CVE:	CVE-2017-6747
Remote:	Yes
Local:	No
Published:	Aug 02 2017 12:00AM
Updated:	Aug 02 2017 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Identity Services Engine (ISE) Virtual Appliance 0 Cisco Identity Services Engine (ISE) Express 0 Cisco Identity Services Engine (ISE) 3300 Series Appliances 2.1(0.474) Cisco Identity Services Engine (ISE) 3300 Series Appliances 2.0(0.306) Cisco Identity Services Engine (ISE) 3300 Series Appliances 1.4(0.253) Cisco Identity Services Engine (ISE) 3300 Series Appliances 1.3(0.876) Cisco Identity Services Engine 0
Not Vulnerable:	Cisco Identity Services Engine (ISE) 3300 Series Appliances 2.1(0.902) Cisco Identity Services Engine (ISE) 3300 Series Appliances 2.0(0.905)

Cisco Identity Services Engine CVE-2017-6747 Authentication Bypass Vulnerability

Cisco Identity Services Engine is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and obtains sensitive information. This may lead to further attacks.

This issue is tracked by Cisco Bug ID CSCvb10995.

Cisco Identity Services Engine CVE-2017-6747 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Identity Services Engine CVE-2017-6747 Authentication Bypass Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Identity Services Engine Authentication Bypass Vulnerability (Cisco)