Cisco ISE Authorization Bypass Allows Endpoint Certificate Acquisition
Original title: Cisco Identity Services Engine Authorization Bypass Vulnerability
Cisco released software updates for ISE and ISE-PIC to address the authorization bypass.
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated remote attacker to obtain an endpoint identity certificate due to improper authorization checks. An attacker could exploit this by sending a crafted request to an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds.
- Affects Cisco Identity Services Engine (ISE) and ISE-PIC
- Allows unauthenticated remote attackers to obtain endpoint identity certificates
- Exploit involves sending crafted requests
- No workarounds available
- Software updates fix the flaw
Impact: unauthenticated remote authorization bypass to obtain endpoint identity certificate
| Product | Affected |
|---|---|
| Cisco Identity Services Engine (ISE) | — |
| Cisco ISE Passive Identity Connector (ISE-PIC) | — |
- 1.Apply Cisco software updates
- Vendors
- Cisco
- Products
- Identity Services EngineISE-PIC
From the original article
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device.
sec.cloudapps.cisco.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.