Unscored CVE-2016-1402 EUVD-2016-2501GHSA-287h-m4vw-mrx7

The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership a…

Published May 21, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815.

References

1035946 vdb-entry
20160517 Cisco Identity Services Engine Active Directory Integration Component Remote Denial of Service Vulnerability vendor-advisory