PT-2022-5227 · Cisco · Cisco Identity Services Engine

Davide Virruso · Published 2022-10-19 · Updated 2024-01-16 · CVE-2022-20822

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (ISE) (affected versions not specified)

Description A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains certain character sequences to an affected system. A successful exploit could allow the attacker to read or delete specific files on the device that their configured administrative level should not have access to.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

RCE

Weakness Enumeration

CWE-22

CWE-20

Related Identifiers

BDU:2022-06490

CVE-2022-20822

Affected Products

Cisco Identity Services Engine

References · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-Dz5dpzyM · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06490 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20822 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20822 · Vendor Advisory
• https://t.me/true_secator/3603 · Telegram Post
• https://t.me/cibsecurity/52112 · Telegram Post
• https://t.me/cvenotify/67619 · Telegram Post
• https://yoroi.company/en/research/cve-advisory-full-disclosure-cisco-ise-path-traversal · Note