cnvd - cnvd-2015-03995

CNVD-2015-03995

Vulnerability from cnvd - Published: 2015-06-26

Title

Cisco Secure Access Control System和Cisco Identity Services Engine信息泄露漏洞

Description

Cisco Secure Access Control System和Cisco Identity Services Engine都是美国思科（Cisco）公司的产品。前者是一套安全访问控制系统。后者是一款基于身份的环境感知平台（ISE身份服务引擎）。 Cisco Secure Access Control System和Cisco Identity Services Engine中存在安全漏洞，该漏洞源于程序未能正确实现支持包的访问控制。远程攻击者可通过实施暴力破解攻击，发送有效的证书利用该漏洞获取敏感信息。

Severity

中

Patch Name

Cisco Secure Access Control System和Cisco Identity Services Engine信息泄露漏洞的补丁

Patch Description

Cisco Secure Access Control System和Cisco Identity Services Engine都是美国思科（Cisco）公司的产品。前者是一套安全访问控制系统。后者是一款基于身份的环境感知平台（ISE身份服务引擎）。Cisco Secure Access Control System和Cisco Identity Services Engine中存在安全漏洞，该漏洞源于程序未能正确实现支持包的访问控制。远程攻击者可通过实施暴力破解攻击，发送有效的证书利用该漏洞获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://tools.cisco.com/bugsearch/bug/CSCue00833

Reference

http://tools.cisco.com/security/center/viewAlert.x?alertId=39501

Impacted products

Name
['Cisco Secure Access Control System <=5.4.0.46.1', 'Cisco Secure Access Control System 5.5(0.46)', 'Cisco Identity Services Engine 1.0(4.573)']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "75379"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-4219"
    }
  },
  "description": "Cisco Secure Access Control System\u548cCisco Identity Services Engine\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u5b89\u5168\u8bbf\u95ee\u63a7\u5236\u7cfb\u7edf\u3002\u540e\u8005\u662f\u4e00\u6b3e\u57fa\u4e8e\u8eab\u4efd\u7684\u73af\u5883\u611f\u77e5\u5e73\u53f0\uff08ISE\u8eab\u4efd\u670d\u52a1\u5f15\u64ce\uff09\u3002\r\n\r\nCisco Secure Access Control System\u548cCisco Identity Services Engine\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u5b9e\u73b0\u652f\u6301\u5305\u7684\u8bbf\u95ee\u63a7\u5236\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5b9e\u65bd\u66b4\u529b\u7834\u89e3\u653b\u51fb\uff0c\u53d1\u9001\u6709\u6548\u7684\u8bc1\u4e66\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tools.cisco.com/bugsearch/bug/CSCue00833",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-03995",
  "openTime": "2015-06-26",
  "patchDescription": "Cisco Secure Access Control System\u548cCisco Identity Services Engine\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u5b89\u5168\u8bbf\u95ee\u63a7\u5236\u7cfb\u7edf\u3002\u540e\u8005\u662f\u4e00\u6b3e\u57fa\u4e8e\u8eab\u4efd\u7684\u73af\u5883\u611f\u77e5\u5e73\u53f0\uff08ISE\u8eab\u4efd\u670d\u52a1\u5f15\u64ce\uff09\u3002Cisco Secure Access Control System\u548cCisco Identity Services Engine\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u5b9e\u73b0\u652f\u6301\u5305\u7684\u8bbf\u95ee\u63a7\u5236\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5b9e\u65bd\u66b4\u529b\u7834\u89e3\u653b\u51fb\uff0c\u53d1\u9001\u6709\u6548\u7684\u8bc1\u4e66\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Secure Access Control System\u548cCisco Identity Services Engine\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Secure Access Control System \u003c=5.4.0.46.1",
      "Cisco Secure Access Control System 5.5(0.46)",
      "Cisco Identity Services Engine 1.0(4.573)"
    ]
  },
  "referenceLink": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39501",
  "serverity": "\u4e2d",
  "submitTime": "2015-06-25",
  "title": "Cisco Secure Access Control System\u548cCisco Identity Services Engine\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2015-4219 (GCVE-0-2015-4219)

Vulnerability from cvelistv5 – Published: 2015-06-24 10:00 – Updated: 2024-08-06 06:11

Summary

Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.

Severity ?

No CVSS data available.

CWE

Assigner

cisco

References

URL

Tags

	http://www.securitytracker.com/id/1032713	vdb-entryx_refsource_SECTRACK
	http://tools.cisco.com/security/center/viewAlert.…	vendor-advisoryx_refsource_CISCO
	http://www.securityfocus.com/bid/75379	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id/1032714	vdb-entryx_refsource_SECTRACK

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:11:11.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1032713",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032713"
          },
          {
            "name": "20150623 Cisco Identity Services Engine and Secure Access Control System Support Bundle Download Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39501"
          },
          {
            "name": "75379",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75379"
          },
          {
            "name": "1032714",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032714"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-06-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-23T18:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1032713",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032713"
        },
        {
          "name": "20150623 Cisco Identity Services Engine and Secure Access Control System Support Bundle Download Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39501"
        },
        {
          "name": "75379",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75379"
        },
        {
          "name": "1032714",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032714"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2015-4219",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1032713",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032713"
            },
            {
              "name": "20150623 Cisco Identity Services Engine and Secure Access Control System Support Bundle Download Vulnerability",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39501"
            },
            {
              "name": "75379",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75379"
            },
            {
              "name": "1032714",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032714"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2015-4219",
    "datePublished": "2015-06-24T10:00:00",
    "dateReserved": "2015-06-04T00:00:00",
    "dateUpdated": "2024-08-06T06:11:11.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-03995

CVE-2015-4219 (GCVE-0-2015-4219)

Tags

Sightings

Nomenclature