CVE-2026-20190 — Cisco Identity Services Engine Information Disclosure Vulnerability

Description (CNA)

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Identity Services Engine Software	affected 3.4.0; affected 3.4 Patch 1; affected 3.4 Patch 2; affected 3.4 Patch 3; affected 3.5.0; affected 3.4 Patch 4; affected 3.5 Patch 1; affected 3.4 Patch 5; affected 3.5 Patch 2
Cisco / Cisco ISE Passive Identity Connector	affected 3.4.0

CWE

CWE-285

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.