Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j346-p98p-cw8v

Опубликовано: 18 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

EPSS

Процентиль: 41%
0.00193
Низкий

6 Medium

CVSS3

Дефекты

CWE-22
CWE-24

Связанные уязвимости

CVSS3: 6
nvd
больше 2 лет назад

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS3: 4.9
fstec
больше 2 лет назад

Уязвимость веб-интерфейса управления платформы управления политиками соединений Cisco Identity Services Engine (ISE), позволяющая нарушителю читать произвольные файлы

EPSS

Процентиль: 41%
0.00193
Низкий

6 Medium

CVSS3

Дефекты

CWE-22
CWE-24