CVE-2015-6266 - The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045

Back Back to CVE browser

MEDIUM

The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045

Published Aug 28, 2015

5.0

MEDIUM

CVSS 2.0

EPSS 1.59%

Description

The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive information from customized documents via a direct request, aka Bug ID CSCuo78045.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

http://tools.cisco.com/security/center/viewAlert.x?alertId=40691
vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1033405
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://tools.cisco.com/security/center/viewAlert.x?alertId=40691		vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1033405		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Aug 28, 2015

Updated Aug 6, 2024

Reserved Aug 17, 2015

Link CVE-2015-6266

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-6266

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-6266