CVE-2015-0757

The CVE concerns Cisco Identity Services Engine (ISE) web framework versions 1.2(1.901) and 1.3(0.722), where improper session handler implementation allows an unauthenticated, remote attacker to read web pages and obtain sensitive information (e.g., MnT reports). This is a genuine information-di...