CoreCVE
Back

HIGH

The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815

Published May 21, 2016

Description

The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-287

Improper Authentication

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published May 21, 2016
Updated Aug 5, 2024
Reserved Jan 4, 2016
Link CVE-2016-1402
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-1402
Red Hat
Severity n/a
Public date n/a
Links CVE-2016-1402