CVE-2023-20106 — Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities

Description (CNA)

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Identity Services Engine Software	affected n/a

CWE

CWE-602

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-delete-read-PK5ghDDd

ADP enrichment

CVE

No English description supplied.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-delete-read-PK5ghDDd

CISA-ADP

No English description supplied.

No references supplied.