Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-93327
HistoryNov 24, 2023 - 12:00 a.m.

Cisco Identity Services Engine Arbitrary File Write Vulnerability

2023-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
cisco identity services engine
arbitrary file write
insufficient validation
network security
sensitive information

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

29.8%

Cisco Identity Services Engine (ISE) is an environment-aware platform (ISE Identity Services Engine) from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An arbitrary file write vulnerability exists in Cisco Identity Services Engine, which stems from insufficient file input validation. An attacker could exploit this vulnerability to replace files and access sensitive server-side information.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

29.8%

Related for CNVD-2023-93327