Medium WID-SEC-2024-2052 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Privilegieneskalation

Published Sep 4, 2024 · Updated Sep 4, 2024 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um seine Privilegien zu erhöhen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

Medium 6.0

CVE-2024-20469

Cisco Identity Services Engine Command Injection Vulnerability

A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability…

Cisco Cisco Identity Services Engine Software Network devices

Sep 4, 2024

Revision history

2024-09-04 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-09-04
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-6kn9tSxm