Security Advisory

CVE-2013-5538

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-10-16 10:00:00
Last updated 2024-09-17 02:42:28
Assigner cisco
State PUBLISHED

Description

The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.