Cisco Identity Services Engine授权问题漏洞

Cisco Identity Services Engine (ISE) is an environment-aware platform (ISE Identity Services Engine) from Cisco. The platform oversees networks by collecting real-time information from networks, users, and devices to develop and implement appropriate policies.The Cisco Identity Services Engine is vulnerable to an authorization issue that stems from publicly available Sensitive Security Assertion Markup Language (SAML) metadata. An unauthenticated, remote attacker could exploit the vulnerability to log in without credentials and gain unrestricted access to all roles.