CVE-2013-5521 - Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287

Back Back to CVE browser

MEDIUM

Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287

Published Oct 25, 2013

5.0

MEDIUM

CVSS 2.0

EPSS 1.23%

Description

Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5521
vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5361
Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5521		vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5361		Advisory