CVE-2024-20332

Summary

CVE-2024-20332 is a recently identified vulnerability affecting the web-based management interface of Cisco Identity Services Engine (ISE). This issue permits an authenticated, remote attacker to execute server-side request forgery (SSRF) attacks on affected devices. The vulnerability stems from insufficient input validation for specific HTTP requests. An adversary can exploit this flaw by sending a malicious HTTP request to the device, potentially allowing them to send arbitrary network requests under the guise of the affected system. Successful exploitation requires the attacker to hold valid Super Admin credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.