CVE-2023-20272: Improper Protection of Alternate Path

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This vulnerability is due to insufficient file input validation. An attacker could exploit this...

Cisco Identity Services Engine Arbitrary File Write (cisco-sa-ise-mult-j-KxpNynR)

According to its self-reported version, Cisco Identity Services Engine is affected by an arbitrary file write vulnerability that can be exploited by a remote, authenticated attacker due to insufficient file input validation. Please see the included Cisco BIDs and Cisco Security Advisory for more...