Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Secure Access Control System和Cisco Identity Services Engine 信息泄露漏洞
Vulnerability Description
Cisco Secure Access Control System和Cisco Identity Services Engine都是美国思科(Cisco)公司的产品。前者是一套安全访问控制系统。后者是一款基于身份的环境感知平台(ISE身份服务引擎)。 Cisco Secure Access Control System和Cisco Identity Services Engine中存在安全漏洞,该漏洞源于程序没有正确实现支持包的访问控制。远程攻击者可通过实施暴力破解攻击,发送有效的证书利用该漏洞获取敏感
CVSS Information
N/A
Vulnerability Type
N/A