EUVD-2017-12952

Malware in sbrugna...

CVE-2017-3835

A vulnerability in the sponsor portal of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.40.908...

CVE-2017-3835

CVE-2017-3835 affects Cisco Identity Services Engine (ISE) sponsor portal. The issue is an SQL Injection due to insufficient input validation, enabling an authenticated, remote attacker to access notices owned by other users. Affected release: ISE 1.4(0.908). Exploitation details in the linked Ci...