Vulnerability Details : CVE-2015-4182
The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.
Products affected by CVE-2015-4182
- cpe:2.3:a:cisco:identity_services_engine_software:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.2\(1.901\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.2\(0.747\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.2\(0.899\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.0.4.573:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.0_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-4182
0.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 43 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-4182
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:N |
8.0
|
4.9
|
NIST |
CWE ids for CVE-2015-4182
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-4182
-
http://www.securityfocus.com/bid/75152
Cisco Identity Services Engine Software CVE-2015-4182 Multiple Privilege Escalation VulnerabilitiesThird Party Advisory;VDB Entry
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=39299
Cisco Identity Services Engine Improper Web Page Controls Privilege Escalation VulnerabilityVendor Advisory
-
http://www.securitytracker.com/id/1032579
Cisco Identity Services Engine Administrative Web Interface Access Control Flaw Lets Remote Authenticated Users Access and Modify Data - SecurityTrackerThird Party Advisory;VDB Entry
Jump to