Vulnerabilities fixed in Cisco Identity Services Engine

Vulnerabilities have been fixed in Cisco Identity Services Engine. The vulnerabilities allow a malicious party to access system data or to bypass authentication. Cisco has released updates to fix the vulnerabilities. More information can be found on the pages below: CVE-2022-20733...

CVE-2022-20819

Cisco Identity Services Engine (ISE) exposes an information-disclosure vulnerability in its web-based management interface. The issue arises from inadequate enforcement of administrative privilege levels for sensitive data, enabling an authenticated attacker with read-only access to a management ...