CVE-2013-5497

The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148.

• CWE-287

• http://osvdb.org/97525
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5497Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=30913Vendor Advisory
• http://www.securityfocus.com/bid/62517Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029057Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87280
• http://osvdb.org/97525
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5497Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=30913Vendor Advisory
• http://www.securityfocus.com/bid/62517Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029057Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87280

Published

Sep 19, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5490Cisco Prime Data Center Network Manager (DCNM) before 6.2(1)…
• CVE-2013-5492administration.jsp in Cisco SocialMiner allows remote attack…
• CVE-2013-5493The diagnostic module in the firmware on Cisco Virtualizatio…
• CVE-2013-5494Cross-site request forgery (CSRF) vulnerability in the web f…
• CVE-2013-5495Cross-site scripting (XSS) vulnerability in the web framewor…
• CVE-2013-5496Open Network Environment Platform (ONEP) in Cisco NX-OS allo…
• CVE-2013-5498The PPTP-ALG component in CRS Carrier Grade Services Engine …
• CVE-2013-5499The remember feature in the DHCP server in Cisco IOS allows …
• CVE-2013-5500Multiple cross-site scripting (XSS) vulnerabilities in the o…
• CVE-2013-5501Cross-site scripting (XSS) vulnerability in the oraservice p…
• CVE-2013-5502The web interface in Cisco MediaSense does not properly prot…
• CVE-2013-5503The UDP process in Cisco IOS XR 4.3.1 does not free packet m…