Description
The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506.
Unscored
CVE-2013-5538
EUVD-2013-5378GHSA-p4gw-4f9m-3rw4
The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read …
Published Oct 16, 2013 · Updated Sep 17, 2024 · Assigned by cisco