CVE-2011-3290: Critical severity cisco identity services engine (ise) vulnerability
Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3290?
CVE-2011-3290 is considered to have a high severity due to the presence of default Oracle database credentials that can be exploited by remote attackers.
How do I fix CVE-2011-3290?
To fix CVE-2011-3290, update your Cisco Identity Services Engine to version 1.0.4.MR2 or later to eliminate the default Oracle database credentials.
Who is affected by CVE-2011-3290?
CVE-2011-3290 affects all versions of Cisco Identity Services Engine prior to 1.0.4.MR2 due to weak default credentials.
What actions can attackers perform using CVE-2011-3290?
Using CVE-2011-3290, attackers may modify settings or carry out unspecified administrative actions due to the default credentials.
What is the impact of CVE-2011-3290 on security?
The impact of CVE-2011-3290 on security is significant as it allows unauthorized access and control over the Cisco Identity Services Engine.