CVE-2013-5521

2013-10-2501:00:00

cisco

www.cve.org

cisco identity services engine

guest accounts

denial of service

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

51.7%

JSON

Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5521