PT-2024-8317 · Cisco · Cisco Ise

Published 2024-11-06 · Updated 2024-11-22 · CVE-2024-20537

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description The issue is related to a lack of server-side validation of Administrator permissions in the web-based management interface of Cisco ISE. This could allow an authenticated, remote attacker to bypass security restrictions and elevate their privileges by sending a specially crafted HTTP request. The attacker would need Read-Only Administrator credentials to exploit this issue.

Recommendations To resolve the issue, update to a version that includes the fix for this problem. As a temporary workaround, consider restricting access to the web-based management interface to minimize the risk of exploitation. Restrict the use of Read-Only Administrator credentials until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2024-09871

CVE-2024-20537

Affected Products

Cisco Ise

References · 8

• https://osv.dev/vulnerability/CVE-2024-20537 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-BBRf7mkE · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09871 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20537 · Security Note
• https://t.me/cvedetector/10018 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1854301572336877738 · Twitter Post
• https://t.me/cvenotify/102376 · Telegram Post
• https://twitter.com/CVEnew/status/1854203354169163858 · Twitter Post