CVE-2013-5525: SQL Injection
Published Oct 10, 2013
·Updated
SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.
Affected Software
3 affected components
Cisco Identity Services Engine Software<=1.2
Cisco Identity Services Engine Software=1.0
Cisco Identity Services Engine Software=1.1
Event History
Oct 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5525?
CVE-2013-5525 has a high severity rating due to its ability to allow authenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2013-5525?
To fix CVE-2013-5525, upgrade to a version later than Cisco Identity Services Engine 1.2.
3
Who is affected by CVE-2013-5525?
CVE-2013-5525 affects users of Cisco Identity Services Engine software versions 1.2 and earlier.
4
What type of vulnerability is CVE-2013-5525?
CVE-2013-5525 is classified as an SQL injection vulnerability.
5
What can attackers do with CVE-2013-5525?
Attackers exploiting CVE-2013-5525 can execute arbitrary SQL commands on the affected system.