Unscored CVE-2014-8015 EUVD-2014-7864GHSA-qwq3-64hp-77x6

The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's gue…

Published Dec 22, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.

References

20141222 Cisco Identity Services Engine Portal Privilege Elevation Vulnerability vendor-advisory
1031423 vdb-entry