CVE-2015-4219
- State
- Published
- Severity
- Not scored
- Published
- Jun 24, 2015
- Updated
- Aug 6, 2024
- Reserved
- Jun 4, 2015
Description
Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1032713vdb-entry
- 20150623 Cisco Identity Services Engine and Secure Access Control System Support Bundle Download Vulnerabilityvendor-advisory
- 75379vdb-entry
- 1032714vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.