CVE-2014-0665

The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote…

published January 15, 2014

CVSS
—
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01436 · 72.8th percentile
Published
2014-01-15T15:00Z
EPSS history
Timeline
  • 15 JAN 15:00Z
    The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote…
    cvelistv5