PT-2019-3940 · Cisco · Cisco Identity Services Engine (Ise)

Published 2019-10-16 · Updated 2019-10-22 · CVE-2019-15282

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (ISE) Software (affected versions not specified)

Description The issue is related to the web-based management interface of Cisco Identity Services Engine (ISE) Software, where an unauthenticated, remote attacker could read tcpdump files generated on an affected device. This is due to an issue in the authentication logic of the web-based management interface. An attacker could exploit this by sending a crafted request to the web interface, potentially allowing them to read a tcpdump file generated with a particular naming scheme. The vulnerability is associated with a lack of authentication for a critical function, which could allow an attacker to gain unauthorized access to protected information by sending a specially crafted request and using the Tcpdump network analysis utility.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2019-04420

CVE-2019-15282

Affected Products

Cisco Identity Services Engine (Ise)

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-15282 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15282 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04420 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-ise-infodis · Vendor Advisory