Cisco: >> Mobility Services Engine Security Vulnerabilities
Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.
CVSS Score
4.0
EPSS Score
0.013
Published
2015-03-26
Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain an unauthenticated session to the database-replication port, and consequently obtain sensitive information, via an SSL connection, aka Bug ID CSCue50794.
CVSS Score
5.0
EPSS Score
0.018
Published
2013-09-04
Page 2