Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-79690
HistorySep 12, 2023 - 12:00 a.m.

Cisco Identity Services Engine Authorization Issues Vulnerability (CNVD-2023-79690)

2023-09-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
cisco
identity services engine
authorization
vulnerability
privilege management
network
operating system
escalation
cnvd-2023-79690

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Cisco Identity Services Engine (ISE) is an environment-aware platform (ISE Identity Services Engine) from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. Cisco Identity Services Engine suffers from an authorization issue vulnerability that stems from improper privilege management, which can be exploited by an authenticated, local attacker to read, write, or delete arbitrary files on the underlying operating system and escalate their privileges to root.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Related for CNVD-2023-79690