CVE-2013-3420: CSRF

Published Jul 17, 2013

Updated

Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506.

Affected Software

2 affected components

Cisco Identity Services Engine Software

Cisco Identity Services Engine

Event History

Jul 17, 2013

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3420?

CVE-2013-3420 is considered a high severity vulnerability due to the potential for remote attackers to hijack user authentication.

How do I fix CVE-2013-3420?

To fix CVE-2013-3420, upgrade to the latest version of Cisco Identity Services Engine software as recommended by Cisco.

What types of attacks are enabled by CVE-2013-3420?

CVE-2013-3420 allows attackers to perform cross-site request forgery (CSRF) attacks, potentially compromising user sessions.

Which Cisco software is affected by CVE-2013-3420?

CVE-2013-3420 affects the Cisco Identity Services Engine software and its related components.

Is user authentication at risk due to CVE-2013-3420?

Yes, user authentication is at significant risk with CVE-2013-3420 as attackers can hijack the sessions of arbitrary users.