Description (CNA)
A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificate and key material. This vulnerability is due to missing authentication on a function of the OCSP responder. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to cause the OCSP responder to reload certificate and key material on demand.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Identity Services Engine Software | affected 3.1.0; affected 3.1.0 p1; affected 3.1.0 p3; affected 3.1.0 p2; affected 3.2.0; affected 3.1.0 p4; affected 3.1.0 p5; affected 3.2.0 p1; affected 3.1.0 p6; affected 3.2.0 p2; affected 3.1.0 p7; affected 3.3.0; affected 3.2.0 p3; affected 3.2.0 p4; affected 3.1.0 p8; affected 3.2.0 p5; affected 3.2.0 p6; affected 3.1.0 p9; affected 3.3 Patch 2; affected 3.3 Patch 1; affected 3.3 Patch 3; affected 3.4.0; affected 3.2.0 p7; affected 3.3 Patch 4; affected 3.4 Patch 1; affected 3.1.0 p10; affected 3.3 Patch 5; affected 3.3 Patch 6; affected 3.4 Patch 2; affected 3.3 Patch 7; affected 3.4 Patch 3; affected 3.5.0; affected 3.4 Patch 4; affected 3.3 Patch 8; affected 3.2 Patch 8; affected 3.5 Patch 1; affected 3.3 Patch 9; affected 3.2 Patch 9; affected 3.4 Patch 5; affected 3.5 Patch 3; affected 3.5 Patch 2; affected 3.3 Patch 10; affected 3.3 Patch 11; affected 3.4 Patch 6; affected 3.2 Patch 10; affected 3.1.0 p72; affected 3.1.0 p11 |
| Cisco / Cisco ISE Passive Identity Connector | affected 3.2.0; affected 3.1.0; affected 3.3.0; affected 3.4.0; affected 3.5.0 |
CWE
CWE-306
References
ADP enrichment
No English description supplied.
No references supplied.