| Package | Affected versions | Patched versions |
|---|---|---|
| identity services engine | = 3.4.0= 3.5.0 | |
| identity services engine passive identity connector | = 3.4.0 |
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free