EUVD-2016-2501

Malware in sbrugna...

Cisco Identity Services Engine DoS

The vulnerability of the Active Directory Integration component of the Cisco Identity Services Engine management platform relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted...

PT-2016-2115

Name of the Vulnerable Software and Affected Versions Cisco Identity Service Engine versions prior to 1.2.0.899 patch 7 Description The issue is related to the Active Directory integration component when AD group-membership authorization is enabled. It allows remote attackers to cause a denial of...

CVE-2002-0848: Undefined Security Weakness

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...