Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.
History

Mon, 28 Oct 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2023-05-18T00:00:00

Updated: 2024-10-28T16:29:21.716Z

Reserved: 2022-10-27T00:00:00

Link: CVE-2023-20167

cve-icon Vulnrichment

Updated: 2024-08-02T09:05:35.793Z

cve-icon NVD

Status : Modified

Published: 2023-05-18T03:15:10.690

Modified: 2024-11-21T07:40:43.740

Link: CVE-2023-20167

cve-icon Redhat

No data.