CVE-2015-4219

Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.

• CWE-200
• CWE-264

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39501Vendor Advisory
• http://www.securityfocus.com/bid/75379Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032713Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032714Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39501Vendor Advisory
• http://www.securityfocus.com/bid/75379Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032713Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032714Third Party Advisory, VDB Entry

Published

Jun 24, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4213Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote auth…
• CVE-2015-4214Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remo…
• CVE-2015-4215Cisco Wireless LAN Controller (WLC) devices with software 7.…
• CVE-2015-4216The remote-support feature on Cisco Web Security Virtual App…
• CVE-2015-4217The remote-support feature on Cisco Web Security Virtual App…
• CVE-2015-4218The web-based user interface in Cisco Jabber through 9.6(3) …
• CVE-2015-4220Cross-site scripting (XSS) vulnerability in Cisco Unified Pr…
• CVE-2015-4221Cisco Unified Communications Manager IM and Presence Service…
• CVE-2015-4222SQL injection vulnerability in Cisco Unified Communications …
• CVE-2015-4223Cisco IOS XR 5.1.3 allows remote attackers to cause a denial…
• CVE-2015-4224Cisco Wireless LAN Controller (WLC) devices with software 7.…
• CVE-2015-4225Cisco Application Policy Infrastructure Controller (APIC) 1.…