漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections on the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCuv32863.
漏洞信息
N/A
漏洞
跨站请求伪造(CSRF)
漏洞
Cisco Identity Services Engine 跨站请求伪造漏洞
漏洞信息
Cisco Identity Services Engine(ISE)是美国思科(Cisco)公司的一款基于身份的环境感知平台(ISE身份服务引擎)。该平台通过收集网络、用户和设备中的实时信息,制定并实施相应策略来监管网络。 Cisco ISE中的基于Web的管理界面存在跨站请求伪造漏洞,该漏洞源于程序没有充分的实施安全保护来防止跨站请求伪造。远程攻击者可通过诱使用户打开特制的链接利用该漏洞执行任意操作。
漏洞信息
N/A
漏洞
N/A