CVE-2014-8017 Information

Description

The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply aka Bug ID CSCur41673.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8017 http://www.securityfocus.com/bid/71767 http://www.securitytracker.com/id/1031425