CVE-2015-6317

Published: Jan 23, 2016Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.

Affected (48)

Products: Cisco: Identity Services Engine Software

Cisco

1 product

Identity Services Engine Software

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Cisco Identity Services Engine Software	Version 1.0.4.573
Cisco Identity Services Engine Software	Version 1.0_base
Cisco Identity Services Engine Software	Version 1.0_mr_base
Cisco Identity Services Engine Software	Version 1.1.1 p1
Cisco Identity Services Engine Software	Version 1.1.1 p2
Cisco Identity Services Engine Software	Version 1.1.1 p3
Cisco Identity Services Engine Software	Version 1.1.1 p4
Cisco Identity Services Engine Software	Version 1.1.1 p5
Cisco Identity Services Engine Software	Version 1.1.1 p6
Cisco Identity Services Engine Software	Version 1.1.2 p1
Cisco Identity Services Engine Software	Version 1.1.2 p2
Cisco Identity Services Engine Software	Version 1.1.2 p3
Cisco Identity Services Engine Software	Version 1.1.2 p4
Cisco Identity Services Engine Software	Version 1.1.2 p5
Cisco Identity Services Engine Software	Version 1.1.2 p6
Cisco Identity Services Engine Software	Version 1.1.2 p7
Cisco Identity Services Engine Software	Version 1.1.2 p8
Cisco Identity Services Engine Software	Version 1.1.2 p9
Cisco Identity Services Engine Software	Version 1.1.3 p1
Cisco Identity Services Engine Software	Version 1.1.3 p2
Cisco Identity Services Engine Software	Version 1.1.3 p3
Cisco Identity Services Engine Software	Version 1.1.3 p4
Cisco Identity Services Engine Software	Version 1.1.3 p5
Cisco Identity Services Engine Software	Version 1.1.3 p6
Cisco Identity Services Engine Software	Version 1.1.3 p7
Cisco Identity Services Engine Software	Version 1.1.4 p1
Cisco Identity Services Engine Software	Version 1.1.4 p2
Cisco Identity Services Engine Software	Version 1.1.4 p3
Cisco Identity Services Engine Software	Version 1.1.4 p4
Cisco Identity Services Engine Software	Version 1.1.4 p5
Cisco Identity Services Engine Software	Version 1.1.4 p6
Cisco Identity Services Engine Software	Version 1.1.4 p7
Cisco Identity Services Engine Software	Version 1.1_base
Cisco Identity Services Engine Software	Version 1.2.0.899 p14
Cisco Identity Services Engine Software	Version 1.2.1 p1
Cisco Identity Services Engine Software	Version 1.2.1 p2
Cisco Identity Services Engine Software	Version 1.2(0.747)
Cisco Identity Services Engine Software	Version 1.2(0.793)
Cisco Identity Services Engine Software	Version 1.2(1.198)
Cisco Identity Services Engine Software	Version 1.2(1.901)
Cisco Identity Services Engine Software	Version 1.2_base
Cisco Identity Services Engine Software	Version 1.3(0.722)
Cisco Identity Services Engine Software	Version 1.3(0.876)
Cisco Identity Services Engine Software	Version 1.3(106.146)
Cisco Identity Services Engine Software	Version 1.3(120.135)
Cisco Identity Services Engine Software	Version 1.4(0.109)
Cisco Identity Services Engine Software	Version 1.4(0.181)
Cisco Identity Services Engine Software	Version 1.4(0.253)

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise2

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1034767

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-ise2

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1034767

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.