Lucene search
HistoryOct 16, 2013 - 10:52 a.m.
CVE-2013-5539
cisco
ise
upload-dialog
file upload
authenticated users
arbitrary file type
security vulnerability
cve-2013-5539
nvd
cisco identity services engine
6.7 Medium
AI Score
Confidence
High
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.0%
The upload-dialog implementation in Cisco Identity Services Engine (ISE) allows remote authenticated users to upload files with an arbitrary file type, and consequently conduct attacks against unspecified other systems, via a crafted file, aka Bug ID CSCui67511.
Related
prion
prion
Design/Logic Flaw
2013-10-16 10:52:00
cvelist
cvelist
CVE-2013-5539
2022-10-03 16:14:54
cisco
cisco
Cisco Identity Services Engine Untrusted File Upload Vulnerability
2013-10-16 20:19:44
6.7 Medium
AI Score
Confidence
High
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.0%
Related for CVE-2013-5539