cisco-sa-ise-priv-esc-UwqPrBM3: Cisco Identity Services Engine Privilege Escalation Vulnerability
First published: Wed Oct 06 2021(Updated: )
A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack and elevate privileges to root. This vulnerability is due to insufficient input validation for specific API endpoints. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting and modifying specific internode communications from one ISE persona to another ISE persona. A successful exploit could allow the attacker to run arbitrary commands with root privileges on the underlying operating system. To exploit this vulnerability, the attacker would need to decrypt HTTPS traffic between two ISE personas that are located on separate nodes. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-priv-esc-UwqPrBM3
Credit: Alexander Polce Leary.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Identity Services Engine | >=2.4<=2.6<2.6 Patch11 | 2.6 Patch11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Cisco Identity Services Engine Privilege Escalation Vulnerability?
The vulnerability ID is cisco-sa-ise-priv-esc-UwqPrBM3.
What is the severity of cisco-sa-ise-priv-esc-UwqPrBM3?
The severity of cisco-sa-ise-priv-esc-UwqPrBM3 is high with a CVSS score of 7.5.
How does this vulnerability in Cisco Identity Services Engine (ISE) occur?
This vulnerability occurs due to insufficient input validation for specific API endpoints in Cisco Identity Services Engine (ISE).
What is the affected software by this vulnerability?
The affected software is Cisco Identity Services Engine (ISE) versions 2.4 up to 2.6 Patch11.
Is there a fix available for this vulnerability?
Yes, the recommended fix for this vulnerability is to upgrade to Cisco Identity Services Engine (ISE) version 2.6 Patch11.
- agent/severity
- agent/title
- agent/weakness
- agent/references
- agent/author
- agent/event
- agent/tags
- agent/type
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco identity services engine
- version/cisco identity services engine/2.4
- version/cisco identity services engine/2.6