CVE-2022-20962

A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2022-20962

CVE-2022-20962 – Cisco ISE Localdisk Management path traversal : Affected product is Cisco Identity Services Engine (ISE). The root cause is insufficient input validation that lets an authenticated, remote attacker send crafted HTTP requests with absolute path sequences, enabling upload of malici...