Lucene search
HistoryAug 29, 2013 - 12:07 p.m.
CVE-2013-3471
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.002
Percentile
53.0%
The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515.
Affected configurations
Node
ciscoidentity_services_engine_softwareMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | identity_services_engine_software | - | cpe:2.3:a:cisco:identity_services_engine_software:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2013-3471
2013-08-29 12:07:54
cisco
cisco
cvelist
cvelist
CVE-2013-3471
2013-08-29 10:00:00
prion
prion
Hardcoded credentials
2013-08-29 12:07:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.002
Percentile
53.0%
Related for NVD:CVE-2013-3471