CVE-2018-0413

CVE-2018-0413 affects the web-based management interface of Cisco Identity Services Engine (ISE). The root cause is insufficient CSRF protections, enabling an unauthenticated, remote attacker to trick a user into clicking a crafted link and perform arbitrary actions in the device’s browser sessio...