Skip to content
OpenAdvisories
Medium WID-SEC-2024-1902 3 CVEs

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen

Published Aug 21, 2024 · Updated Aug 21, 2024 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um Daten zu manipulieren, vertrauliche Informationen preiszugeben und Sicherheitsmaßnahmen zu umgehen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 3

  • Medium 6.5
    CVE-2024-20417

    Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabities

    Multiple vulnerabilities in the REST API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct blind SQL injection attacks. These vulnerabilities are due to insufficient validation of user-supplied input in REST API …

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2024-20466

    Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to improper enforcement of administr…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.5
    CVE-2024-20486

    Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulne…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References