Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

CVE-2012-3908

Cisco advisory CISCO-SA-20120920-CVE-2012-3908 describes CSRF vulnerabilities in the ISE Administrator UI (Tomcat-based) on Cisco Identity Services Engine 3300-series appliances prior to 1.1.0.665 Patch 1. An unauthenticated, remote attacker could trick an authorized user into following a malicio...

CVE-2012-3908

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

CVE-2012-3908: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the ISE Administrator user interface aka the Apache Tomcat interface on Cisco Identity Services Engine ISE 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators,...

CVE-2011-3290

Cisco Identity Services Engine (ISE) prior to 1.0.4.MR2 is affected by CVE-2011-3290 due to default Oracle database credentials. The underlying cause is hard-coded/default credentials in the ISE database, enabling a remote attacker to modify configuration and perform administrative actions withou...

CVE-2011-3290: Undefined Security Weakness

Cisco Identity Services Engine ISE before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135...