CVE-2024-20515
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 2, 2024
Updated: Oct 8, 2024
CWE ID 311
Summary
CVE-2024-20515 is a vulnerability affecting the web-based management interface of Cisco Identity Services Engine (ISE). This issue allows authenticated, remote attackers to obtain sensitive information from an affected device. The vulnerability stems from insufficient data protection mechanisms for specific configuration settings. An attacker with Read-Only Administrator privileges can exploit this flaw by accessing a page containing sensitive data, which could result in the exposure of device credentials typically hidden from such users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco Identity Services Engine
Affected Vendors
- Cisco