ID
VAR-202211-1027
CVE
CVE-2022-20965
TITLE
Cisco Identity Services Engine Vulnerability in
Trust: 0.8
DESCRIPTION
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interface. This vulnerability is due to improper access control on a feature within the web-based management interface of the affected system. An attacker could exploit this vulnerability by accessing features through direct requests, bypassing checks within the application. A successful exploit could allow the attacker to take privileged actions within the web-based management interface that should be otherwise restricted. {{value}} ["%7b%7bvalue%7d%7d"])}]] . Cisco Identity Services Engine Exists in unspecified vulnerabilities.Information may be obtained and information may be tampered with. For more information about these vulnerabilities, see the Details section of this advisory. Cisco plans to release software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | cisco | model: | identity services engine | scope: | lt | version: | 2.6.0 | Trust: 1.0 |
| vendor: | cisco | model: | identity services engine | scope: | eq | version: | 3.2 | Trust: 1.0 |
| vendor: | cisco | model: | identity services engine | scope: | eq | version: | 3.0.0 | Trust: 1.0 |
| vendor: | cisco | model: | identity services engine | scope: | eq | version: | 2.7.0 | Trust: 1.0 |
| vendor: | cisco | model: | identity services engine | scope: | eq | version: | 2.6.0 | Trust: 1.0 |
| vendor: | cisco | model: | identity services engine | scope: | eq | version: | 3.1 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco identity services engine | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco identity services engine | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-648 | Trust: 1.0 |
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
| problemtype: | others (CWE-Other) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | cisco-sa-ise-7Q4TNYUx | url: | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-7Q4TNYUx | Trust: 0.8 |
| title: | Cisco Identity Services Engine Security vulnerabilities | url: | http://123.124.177.30/web/xxk/bdxqById.tag?id=214327 | Trust: 0.6 |
| title: | Cisco: Cisco Identity Services Engine Vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-ise-7Q4TNYUx | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-20965 | Trust: 3.4 |
| db: | JVNDB | id: | JVNDB-2022-006004 | Trust: 0.8 |
| db: | AUSCERT | id: | ESB-2022.5984.4 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2022.5984.2 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202211-2954 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-405518 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2022-20965 | Trust: 0.1 |
REFERENCES
| url: | https://sec.cloudapps.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ise-7q4tnyux | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-20965 | Trust: 0.8 |
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ise-7q4tnyux | Trust: 0.7 |
| url: | https://www.auscert.org.au/bulletins/esb-2022.5984.2 | Trust: 0.6 |
| url: | https://cxsecurity.com/cveshow/cve-2022-20965/ | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2022.5984.4 | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-405518 |
| db: | VULMON | id: | CVE-2022-20965 |
| db: | JVNDB | id: | JVNDB-2022-006004 |
| db: | CNNVD | id: | CNNVD-202211-2954 |
| db: | NVD | id: | CVE-2022-20965 |
LAST UPDATE DATE
2024-08-14T13:21:31.001000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-405518 | date: | 2023-01-26T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-006004 | date: | 2023-06-23T08:18:00 |
| db: | CNNVD | id: | CNNVD-202211-2954 | date: | 2023-01-28T00:00:00 |
| db: | NVD | id: | CVE-2022-20965 | date: | 2024-01-25T17:15:23.133 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-405518 | date: | 2023-01-20T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-006004 | date: | 2023-06-23T00:00:00 |
| db: | CNNVD | id: | CNNVD-202211-2954 | date: | 2022-11-16T00:00:00 |
| db: | NVD | id: | CVE-2022-20965 | date: | 2023-01-20T07:15:11.083 |