Cisco Identity Services Engine (ISE) is an environment-aware platform (ISE Identity Services Engine) from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. Cisco Identity Services Engine suffers from an authorization issue vulnerability that stems from improper privilege management, which can be exploited by an authenticated, local attacker to read, write, or delete arbitrary files on the underlying operating system and escalate their privileges to root.
CPE | Name | Operator | Version |
---|---|---|---|
cisco identity services engine | le | 2.7 | |
cisco identity services engine >=3.0, | le | 3.3 |