CVE-2012-3908

Cisco advisory CISCO-SA-20120920-CVE-2012-3908 describes CSRF vulnerabilities in the ISE Administrator UI (Tomcat-based) on Cisco Identity Services Engine 3300-series appliances prior to 1.1.0.665 Patch 1. An unauthenticated, remote attacker could trick an authorized user into following a malicio...