CVE-2017-12316: High severity cisco identity services engine vulnerability
A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform multiple login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side login attempt limit enforcement. An attacker could exploit this vulnerability by sending modified login attempts to the Guest Portal login page. An exploit could allow the attacker to perform brute-force password attacks on the ISE Guest Portal. Cisco Bug IDs: CSCve98518.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12316?
CVE-2017-12316 is considered a high severity vulnerability due to its potential impact on authentication controls.
How do I fix CVE-2017-12316?
To fix CVE-2017-12316, upgrade to a patched version of Cisco Identity Services Engine Software that addresses this vulnerability.
Who is affected by CVE-2017-12316?
Organizations using Cisco Identity Services Engine Software version 2.1(0.229) are affected by CVE-2017-12316.
What can an attacker do with CVE-2017-12316?
An attacker can exploit CVE-2017-12316 to perform multiple failed login attempts, potentially leading to a brute-force attack.
Is authentication impacted by CVE-2017-12316?
Yes, CVE-2017-12316 impacts authentication by allowing excessive login attempts, which may compromise account security.