CVE-2015-6317: Medium severity cisco identity services engine vulnerability
Published Jan 23, 2016
·Updated
Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926.
Affected Software
48 affected components
Cisco Identity Services Engine Software=1.0.4.573
Cisco Identity Services Engine Software=1.0_base
Cisco Identity Services Engine Software=1.0_mr_base
Cisco Identity Services Engine Software=1.1.1-p1
Cisco Identity Services Engine Software=1.1.1-p2
Cisco Identity Services Engine Software=1.1.1-p3
Cisco Identity Services Engine Software=1.1.1-p4
Cisco Identity Services Engine Software=1.1.1-p5
Cisco Identity Services Engine Software=1.1.1-p6
Cisco Identity Services Engine Software=1.1.2-p1
Cisco Identity Services Engine Software=1.1.2-p2
Cisco Identity Services Engine Software=1.1.2-p3
Cisco Identity Services Engine Software=1.1.2-p4
Cisco Identity Services Engine Software=1.1.2-p5
Cisco Identity Services Engine Software=1.1.2-p6
Cisco Identity Services Engine Software=1.1.2-p7
Cisco Identity Services Engine Software=1.1.2-p8
Cisco Identity Services Engine Software=1.1.2-p9
Cisco Identity Services Engine Software=1.1.3-p1
Cisco Identity Services Engine Software=1.1.3-p2
Cisco Identity Services Engine Software=1.1.3-p3
Cisco Identity Services Engine Software=1.1.3-p4
Cisco Identity Services Engine Software=1.1.3-p5
Cisco Identity Services Engine Software=1.1.3-p6
Cisco Identity Services Engine Software=1.1.3-p7
Cisco Identity Services Engine Software=1.1.4-p1
Cisco Identity Services Engine Software=1.1.4-p2
Cisco Identity Services Engine Software=1.1.4-p3
Cisco Identity Services Engine Software=1.1.4-p4
Cisco Identity Services Engine Software=1.1.4-p5
Cisco Identity Services Engine Software=1.1.4-p6
Cisco Identity Services Engine Software=1.1.4-p7
Cisco Identity Services Engine Software=1.1_base
Cisco Identity Services Engine Software=1.2\(0.747\)
Cisco Identity Services Engine Software=1.2\(0.793\)
Cisco Identity Services Engine Software=1.2\(1.198\)
Cisco Identity Services Engine Software=1.2\(1.901\)
Cisco Identity Services Engine Software=1.2.0.899-p14
Cisco Identity Services Engine Software=1.2.1-p1
Cisco Identity Services Engine Software=1.2.1-p2
Cisco Identity Services Engine Software=1.2_base
Cisco Identity Services Engine Software=1.3\(0.722\)
Cisco Identity Services Engine Software=1.3\(0.876\)
Cisco Identity Services Engine Software=1.3\(106.146\)
Cisco Identity Services Engine Software=1.3\(120.135\)
Cisco Identity Services Engine Software=1.4\(0.109\)
Cisco Identity Services Engine Software=1.4\(0.181\)
Cisco Identity Services Engine Software=1.4\(0.253\)
Event History
Jan 23, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6317?
CVE-2015-6317 has been rated as a medium-severity vulnerability that may allow unauthorized access to web resources.
2
How do I fix CVE-2015-6317?
To fix CVE-2015-6317, upgrade your Cisco Identity Services Engine (ISE) to version 2.0 or later.
3
Who is affected by CVE-2015-6317?
CVE-2015-6317 affects various versions of the Cisco Identity Services Engine prior to 2.0.
4
What type of vulnerability is CVE-2015-6317?
CVE-2015-6317 is a web access control vulnerability that allows remote authenticated users to bypass intended access restrictions.
5
What are the potential consequences of CVE-2015-6317?
The consequences of CVE-2015-6317 include unauthorized access to sensitive web resources, potentially compromising security policies.