CVE-2017-12316 Auth bypass in Cisco Identity Services Engine
An unauthenticated remote attacker can bypass login attempt limits on the Cisco ISE Guest Portal to perform brute-force password attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-12316?
CVE-2017-12316 is a high-severity authentication bypass vulnerability in Cisco Identity Services Engine, published on 16 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform multiple login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side login attempt limit enforcement. An attacker could exploit this vulnerability by sending modified login attempts to the Guest Portal login page. An exploit could allow the attacker to perform brute-force password attacks on the ISE Guest Portal. Cisco Bug IDs: CSCve98518.
Which versions are affected by CVE-2017-12316?
It affects 1 product.
Products include Cisco Identity Services Engine Software.
How do I fix CVE-2017-12316?
No fix has been published for CVE-2017-12316 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-12316 being exploited?
There is no known exploitation of CVE-2017-12316 in the wild and no public exploit code.
Other vulnerabilities in Cisco Identity Services Engine
Sources
Also known as GHSA-7vjf-xjh9-p8c2.