Cisco Identity Services Engine Sensitive Information Disclosure (cisco-sa-ise-info-exp-8RsuEu8S)

According to its self-reported version, Cisco Identity Services Engine Software is affected by multiple information disclosure vulnerabilities in its admin portal component due to improper enforcement of administrator privilege levels for sensitive data. An authenticated, remote attacker can...

CVE-2021-1412

CVE-2021-1412 affects Cisco Identity Services Engine (ISE) Admin portal. The root cause is improper enforcement of administrator privilege levels for sensitive data, enabling an authenticated, read-only admin to browse pages containing sensitive configuration information and disclose it. Exploita...