Unscored CVE-2013-3471 EUVD-2013-3406GHSA-p5xm-g6f8-92p3

The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and password…

Published Aug 29, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515.

References

20130828 Cisco ISE Captive Portal Application Plaintext Credentials Exposure Vulnerability vendor-advisory
1028965 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=30524