Vulnerability Details : CVE-2013-3471
The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515.
Products affected by CVE-2013-3471
- cpe:2.3:a:cisco:identity_services_engine_software:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-3471
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 52 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-3471
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2013-3471
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-3471
-
http://www.securitytracker.com/id/1028965
Cisco Identity Services Engine Discloses Authentication Credentials to Remote Users - SecurityTrackerThird Party Advisory;VDB Entry
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=30524
Cisco ISE Captive Portal Application Plaintext Credentials Exposure VulnerabilityVendor Advisory
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3471
Cisco ISE Captive Portal Application Plaintext Credentials Exposure VulnerabilityVendor Advisory
Jump to