Cisco Identity Services Engine CVE-2013-5525 SQL Injection Vulnerability

Bugtraq ID:	62799
Class:	Input Validation Error
CVE:	CVE-2013-5525
Remote:	Yes
Local:	No
Published:	Oct 07 2013 12:00AM
Updated:	Oct 10 2013 06:33AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Identity Services Engine CVE-2013-5525 SQL Injection Vulnerability

Cisco Identity Services Engine is prone to an SQL-injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue is being tracked by Cisco Bug ID CSCug90502.

Cisco Identity Services Engine CVE-2013-5525 SQL Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Identity Services Engine CVE-2013-5525 SQL Injection Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Identity Services Engine CVE-2013-5525 SQL Injection Vulnerability

References:

• Cisco Homepage (Cisco)