CVE-2015-0757

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-05-29 · updated 2026-06-17
Weakness: CWE-200

Description

The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.

Affected products

Cisco Identity Services Engine unknown: 1.2(1.901), 1.3(0.722)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39042
http://www.securityfocus.com/bid/74864
http://www.securitytracker.com/id/1032420
http://tools.cisco.com/security/center/viewAlert.x?alertId=39042
http://www.securityfocus.com/bid/74864
http://www.securitytracker.com/id/1032420

Get alerted when CVE-2015-0757 or the next vulnerability affects your stack