5.5
Moyenne
CVE-2026-20146 A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow…
Description
A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system to either read or delete arbitrary files. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to access sensitive files or delete arbitrary files on the affected system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Identity Services Engine Software | 3.5.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.4.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.3.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.2.0 | Pas de correctif indiqué |
| Cisco Identity Services Engine Software | 3.1.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.5.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.4.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.3.0 | Pas de correctif indiqué |
| Cisco ISE Passive Identity Connector | 3.2.0 | Pas de correctif indiqué |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco ISE Passive Identity Connector | 3.1.0 | Pas de correctif indiqué |
Références
- cisco-sa-ise-traversal-xNt7wb2Y sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Identity Services Engine Software
Les 199 CVE de Cisco Identity Services Engine Software →
CVE-2026-20241
Cisco Identity Services Engine Authorization Bypass Vulnerability
5.3
Moyenne
CVE-2026-76426
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to…
4.9
Moyenne
CVE-2026-76431
A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC…
4.9
Moyenne
CVE-2026-76427
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to…
4.9
Moyenne