Security Advisory

CVE-2013-5538

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-10-16 10:00:00
Last updated 2024-09-17 02:42:28
Assigner cisco
CVSS score not scored
State PUBLISHED

Description

The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.