CVE-2018-15425

Опубликовано: 05 окт. 2018

Источник: nvd

CVSS3: 4.7

CVSS2: 6.5

EPSS Низкий

Описание

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server.

Ссылки

http://www.securitytracker.com/id/1041792
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-ise-mult-vulns
Vendor Advisory
http://www.securitytracker.com/id/1041792
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-ise-mult-vulns
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:identity_services_engine:2.1\(0.474\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.1\(0.907\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.2\(0.470\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.2\(0.909\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.3\(0.298\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.3\(0.905\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.4\(0.357\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine:2.4\(0.904\):*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00294

Низкий

4.7 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20

CWE-502

Связанные уязвимости

GHSA-f3wr-m2wm-39gh