cisco-sa-ISE-SAML-nuukMPf9: Cisco Identity Services Engine Authentication Bypass Vulnerability
A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Assertion Markup Language (SAML) metadata. An attacker could exploit this vulnerability by using the exposed SAML metadata to bypass authentication to the user portal. A successful exploit could allow the attacker to access all roles without any restrictions. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-SAML-nuukMPf9
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-ISE-SAML-nuukMPf9?
The cisco-sa-ISE-SAML-nuukMPf9 vulnerability is considered critical due to the potential for unauthorized access to the Cisco Identity Services Engine.
How do I fix cisco-sa-ISE-SAML-nuukMPf9?
To fix cisco-sa-ISE-SAML-nuukMPf9, you should upgrade to the latest version of Cisco Identity Services Engine as recommended by Cisco.
Who is affected by cisco-sa-ISE-SAML-nuukMPf9?
Organizations using vulnerable versions of Cisco Identity Services Engine are affected by the cisco-sa-ISE-SAML-nuukMPf9 vulnerability.
What does cisco-sa-ISE-SAML-nuukMPf9 allow an attacker to do?
cisco-sa-ISE-SAML-nuukMPf9 allows an unauthenticated attacker to log in without credentials and access all roles unrestricted.
When was cisco-sa-ISE-SAML-nuukMPf9 disclosed?
cisco-sa-ISE-SAML-nuukMPf9 was disclosed by Cisco in a security advisory related to vulnerabilities in the Cisco Identity Services Engine.