7.5Yüksek

CVE-2026-20190Cisco Identity Services Engine Information Disclosure Vulnerability

Cisco Cisco Identity Services Engine Software; Cisco Cisco ISE Passive Identity Connector Yayım: (4 ay önce)

Açıklama

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.

Zayıflık türü (CWE): CWE-285

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Cisco Cisco Identity Services Engine Software 3.4.0, 3.4 Patch 1, 3.4 Patch 2, 3.4 Patch 3, 3.5.0, 3.4 Patch 4, 3.5 Patch 1, 3.4 Patch 5, 3.5 Patch 2
Cisco Cisco ISE Passive Identity Connector 3.4.0
cisco identity services engine 3.4.0
cisco identity services engine passive identity connector 3.4.0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (15)

  • cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*
  • cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*