Vulnerabilities > CVE-2023-20111 - Unspecified vulnerability in Cisco Identity Services Engine

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2023-08-16

Updated: 2024-11-21

Summary

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to the improper storage of sensitive information within the web-based management interface. An attacker could exploit this vulnerability by logging in to the web-based management interface and viewing hidden fields within the application. A successful exploit could allow the attacker to access sensitive information, including device entry credentials, that could aid the attacker in further attacks.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Identity Services Engine - Cisco Identity Services Engine 1.0 Cisco Identity Services Engine 1.0.4 Cisco Identity Services Engine 1.1 Cisco Identity Services Engine 1.1.1 Cisco Identity Services Engine 1.1.2 Cisco Identity Services Engine 1.1.3 Cisco Identity Services Engine 1.1.4 Cisco Identity Services Engine 1.2 Cisco Identity Services Engine 1.2\(1.199\) Cisco Identity Services Engine 1.2.1 Cisco Identity Services Engine 1.3 Cisco Identity Services Engine 1.3\(0.722\) Cisco Identity Services Engine 1.3\(0.876\) Cisco Identity Services Engine 1.3\(0.909\) Cisco Identity Services Engine 1.3\(106.146\) Cisco Identity Services Engine 1.3\(120.135\) Cisco Identity Services Engine 1.4 Cisco Identity Services Engine 1.4\(0.109\) Cisco Identity Services Engine 1.4\(0.181\) Cisco Identity Services Engine 1.4\(0.253\) Cisco Identity Services Engine 1.4\(0.908\) Cisco Identity Services Engine 2.0 Cisco Identity Services Engine 2.0\(0.147\) Cisco Identity Services Engine 2.0\(0.169\) Cisco Identity Services Engine 2.0\(0.222\) Cisco Identity Services Engine 2.0\(0.234\) Cisco Identity Services Engine 2.0\(0.249\) Cisco Identity Services Engine 2.0\(0.306\) Cisco Identity Services Engine 2.0\(1.130\) Cisco Identity Services Engine 2.0.1 Cisco Identity Services Engine 2.1 Cisco Identity Services Engine 2.1\(0.474\) Cisco Identity Services Engine 2.1\(0.476\) Cisco Identity Services Engine 2.1\(0.800\) Cisco Identity Services Engine 2.1\(0.904\) Cisco Identity Services Engine 2.1\(0.907\) Cisco Identity Services Engine 2.1\(102.101\) Cisco Identity Services Engine 2.1\(102.103\) Cisco Identity Services Engine 2.1.0 Cisco Identity Services Engine 2.1_Base Cisco Identity Services Engine 2.2 Cisco Identity Services Engine 2.2\(0.283\) Cisco Identity Services Engine 2.2\(0.470\) Cisco Identity Services Engine 2.2\(0.471\) Cisco Identity Services Engine 2.2\(0.903\) Cisco Identity Services Engine 2.2\(0.909\) Cisco Identity Services Engine 2.2\(0.910\) Cisco Identity Services Engine 2.2\(1.145\) Cisco Identity Services Engine 2.2.0 Cisco Identity Services Engine 2.2.0.470 Cisco Identity Services Engine 2.3 Cisco Identity Services Engine 2.3\(0.151\) Cisco Identity Services Engine 2.3\(0.298\) Cisco Identity Services Engine 2.3\(0.904\) Cisco Identity Services Engine 2.3\(0.905\) Cisco Identity Services Engine 2.3.0 Cisco Identity Services Engine 2.3.0.298 Cisco Identity Services Engine 2.4 Cisco Identity Services Engine 2.4\(0.192\) Cisco Identity Services Engine 2.4\(0.247\) Cisco Identity Services Engine 2.4\(0.357\) Cisco Identity Services Engine 2.4\(0.901\) Cisco Identity Services Engine 2.4\(0.901.1\) Cisco Identity Services Engine 2.4\(0.902\) Cisco Identity Services Engine 2.4\(0.903\) Cisco Identity Services Engine 2.4\(0.904\) Cisco Identity Services Engine 002.004\(000.914\) Cisco Identity Services Engine 2.4\(100.159\) Cisco Identity Services Engine 2.4.0 Cisco Identity Services Engine 2.4.0.357 Cisco Identity Services Engine 2.5 Cisco Identity Services Engine 2.5\(0.1\) Cisco Identity Services Engine 2.5\(0.225\) Cisco Identity Services Engine 2.5\(0.353\) Cisco Identity Services Engine 2.6 Cisco Identity Services Engine 002.006\(000.156\) Cisco Identity Services Engine 2.6\(0.156\) Cisco Identity Services Engine 2.6\(0.999\) Cisco Identity Services Engine 2.7.0 Cisco Identity Services Engine 3.0.0 Cisco Identity Services Engine 3.1	176

Summary

Vulnerable Configurations

References