Cisco Identity Services Engine Information Disclosure (cisco-sa-info-exp-YXAWYP3s)

According to its self-reported version, Cisco Identity Services Engine is affected by an information disclosure vulnerability in its web-based management interface due to improper enforcement of administrative privilege levels for high-value sensitive data. An authenticated, remote attacker can...

CVE-2022-20782

CVE-2022-20782 describes an information-disclosure vulnerability in Cisco Identity Services Engine (ISE) web-based management interface. The issue stems from improper enforcement of administrative privilege levels for high-value sensitive data. An attacker with read-only Administrator privileges ...

CVE-2022-20782 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to improper enforcement of administrative privilege levels for high-value...