CVE-2015-4182

The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087.

• CWE-264

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39299Vendor Advisory
• http://www.securityfocus.com/bid/75152Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032579Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39299Vendor Advisory
• http://www.securityfocus.com/bid/75152Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032579Third Party Advisory, VDB Entry

Published

Jun 12, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4176fs/namespace.c in the Linux kernel before 4.0.2 does not pro…
• CVE-2015-4177The collect_mounts function in fs/namespace.c in the Linux k…
• CVE-2015-4178The fs_pin implementation in the Linux kernel before 4.0.5 d…
• CVE-2015-4179Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-4180Directory traversal vulnerability in get_file.php in phpMyBa…
• CVE-2015-4181Directory traversal vulnerability in get_file.php in phpMyBa…
• CVE-2015-4183Cisco UCS Central Software 1.2(1a) allows local users to gai…
• CVE-2015-4184The anti-spam scanner on Cisco Email Security Appliance (ESA…
• CVE-2015-4185The TCL interpreter in Cisco IOS 15.2 does not properly main…
• CVE-2015-4186The diagnostics subsystem in the administrative web interfac…
• CVE-2015-4188SQL injection vulnerability in the Manager interface in Cisc…
• CVE-2015-4189Cross-site request forgery (CSRF) vulnerability in Cisco Dat…