Skip to content
OpenAdvisories
Medium WID-SEC-2025-1239 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Unsicheres Erzeugen von temporären Dateien

Published Jun 4, 2025 · Updated Jun 4, 2025 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um temporäre Dateien zu erzeugen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

  • Medium 4.9
    CVE-2025-20130

    Cisco Identity Services Engine Access Control Bypass Vulnerability

    A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References