Cisco Identity Services Engine Software CVE-2015-0757 Information Disclosure Vulnerability
BID:74864
Info
Cisco Identity Services Engine Software CVE-2015-0757 Information Disclosure Vulnerability
| Bugtraq ID: | 74864 |
| Class: | Design Error |
| CVE: |
CVE-2015-0757 |
| Remote: | Yes |
| Local: | No |
| Published: | May 27 2015 12:00AM |
| Updated: | Mar 23 2017 01:01AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Identity Services Engine Software 1.3 (0.722) Cisco Identity Services Engine Software 1.2 (1.901) |
| Not Vulnerable: | |
Discussion
Cisco Identity Services Engine Software CVE-2015-0757 Information Disclosure Vulnerability
Cisco Identity Services Engine Software is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information stored on an affected device. This may lead to further attacks.
This issue being tracked by Cisco Bug ID CSCuq23140.
Cisco Identity Services Engine Software is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information stored on an affected device. This may lead to further attacks.
This issue being tracked by Cisco Bug ID CSCuq23140.
Exploit / POC
Cisco Identity Services Engine Software CVE-2015-0757 Information Disclosure Vulnerability
An attacker can exploit this issue using browser or readily available tools.
An attacker can exploit this issue using browser or readily available tools.
Solution / Fix
Cisco Identity Services Engine Software CVE-2015-0757 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Identity Services Engine Software CVE-2015-0757 Information Disclosure Vulnerability
References:
References: