CVE-2023-20022

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:44+00:00| seen| https://t.me/cibsecurity/61488...

CVE-2023-20022 Cisco Identity Services Engine Privilege Escalation Vulnerabilities

Multiple vulnerabilities in specific Cisco Identity Services Engine ISE CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid...

CVE-2023-20022

CVE-2023-20022 relates to multiple privilege-escalation vulnerabilities in Cisco Identity Services Engine (ISE) related to command injection via abused CLI commands. The issues arise from insufficient validation of user-supplied input and require an authenticated, local attacker with Administrato...

Cisco Identity Services Engine Privilege Escalation Vulnerabilities (cisco-sa-ise-os-injection-pxhKsDM)

According to its self-reported version, Cisco Identity Services Engine is affected by multiple privilege escalation vulnerabilities that allow an authenticated, local attacker with Administrator privileges to inject commands due to insufficient input validation. Please see the included Cisco BIDs...