CVE-2024-20529

Summary

CVE-2024-20529 is a vulnerability affecting the API of Cisco ISE. This issue allows authenticated, remote attackers with valid Super Admin credentials to read and delete arbitrary files on an impacted device. The vulnerability arises from insufficient validation of user-supplied parameters in API requests. An attacker can exploit this flaw by sending a specially crafted API request, potentially leading to unintended file manipulation on the underlying operating system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.