Cisco Identity Services Engine Privilege Escalation CVE-2023-20193 (cisco-sa-ise-priv-esc-KJLp2Aw)

According to its self-reported version, Cisco Identity Services Engine is affected by a privilege escalation vulnerability that allows an authenticated, Administrator-level attacker to read, write and delete arbitrary files and elevate their privileges to root due to improper privilege management...

CVE-2023-20193

Summary: CVE-2023-20193 affects Cisco Identity Services Engine (ISE) via the Embedded Service Router (ESR). The vulnerability stems from improper privilege management in the ESR console, enabling an authenticated, local attacker (with Administrator-level privileges) to read, write, or delete arbi...