Summary
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um Dateien zu manipulieren oder beliebigen Programmcode auszuführen.
Product
Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.
Vulnerabilities 2
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…
-
Medium 5.5
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
Revision history
-
#2
Produktzuordnung überprüft
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-ise-csrf-NfAKXrp5 vom 2024-04-03
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-csrf-NfAKXrp5
-
Cisco Security Advisory cisco-sa-ise-ssrf-FtSTh5Oz vom 2024-04-03
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-ssrf-FtSTh5Oz