| शीर्षक | Unauthenticated persistent cross-site scripting injection into the administrative console of CISCO ISE web application via DHCP request |
|---|
| विवरण | An unauthenticated attacker who is able to inject a specially crafted DHCP request packet into the network controlled by Cisco Identify
Service Engine (ISE), is able to persistently store code (e. g.JavaScript), which is executed in the context of the Web-browser accessing the Web-based management interface.
CVE-2020-3156
Max Moser/Katharina Maennle |
|---|
| स्रोत | ⚠️ https://www.modzero.com/advisories/MZ-19-03-CISCO-ISE.txt |
|---|
| उपयोगकर्ता | misc (UID 3) |
|---|
| सबमिशन | 19/02/2020 08:38 PM (6 साल पहले) |
|---|
| संयम | 10/08/2020 10:43 AM (6 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 150363 [Cisco Identity Services Engine Log संग्रहीत क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 19 |
|---|