CVE Vulnerabilities

CVE-2022-20965

Published: Jan 20, 2023 | Modified: Jan 25, 2024
CVSS 3.x
5.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interface. This vulnerability is due to improper access control on a feature within the web-based management interface of the affected system. An attacker could exploit this vulnerability by accessing features through direct requests, bypassing checks within the application. A successful exploit could allow the attacker to take privileged actions within the web-based management interface that should be otherwise restricted.

{{value}} [%7b%7bvalue%7d%7d])}]]

Affected Software

Name Vendor Start Version End Version
Identity_services_engine Cisco * 2.6.0 (excluding)
Identity_services_engine Cisco 2.6.0 (including) 2.6.0 (including)
Identity_services_engine Cisco 2.6.0-patch1 (including) 2.6.0-patch1 (including)
Identity_services_engine Cisco 2.6.0-patch10 (including) 2.6.0-patch10 (including)
Identity_services_engine Cisco 2.6.0-patch11 (including) 2.6.0-patch11 (including)
Identity_services_engine Cisco 2.6.0-patch12 (including) 2.6.0-patch12 (including)
Identity_services_engine Cisco 2.6.0-patch2 (including) 2.6.0-patch2 (including)
Identity_services_engine Cisco 2.6.0-patch3 (including) 2.6.0-patch3 (including)
Identity_services_engine Cisco 2.6.0-patch5 (including) 2.6.0-patch5 (including)
Identity_services_engine Cisco 2.6.0-patch6 (including) 2.6.0-patch6 (including)
Identity_services_engine Cisco 2.6.0-patch7 (including) 2.6.0-patch7 (including)
Identity_services_engine Cisco 2.6.0-patch8 (including) 2.6.0-patch8 (including)
Identity_services_engine Cisco 2.6.0-patch9 (including) 2.6.0-patch9 (including)
Identity_services_engine Cisco 2.7.0 (including) 2.7.0 (including)
Identity_services_engine Cisco 2.7.0-patch1 (including) 2.7.0-patch1 (including)
Identity_services_engine Cisco 2.7.0-patch2 (including) 2.7.0-patch2 (including)
Identity_services_engine Cisco 2.7.0-patch3 (including) 2.7.0-patch3 (including)
Identity_services_engine Cisco 2.7.0-patch4 (including) 2.7.0-patch4 (including)
Identity_services_engine Cisco 2.7.0-patch5 (including) 2.7.0-patch5 (including)
Identity_services_engine Cisco 2.7.0-patch6 (including) 2.7.0-patch6 (including)
Identity_services_engine Cisco 2.7.0-patch7 (including) 2.7.0-patch7 (including)
Identity_services_engine Cisco 3.0.0 (including) 3.0.0 (including)
Identity_services_engine Cisco 3.0.0-patch1 (including) 3.0.0-patch1 (including)
Identity_services_engine Cisco 3.0.0-patch2 (including) 3.0.0-patch2 (including)
Identity_services_engine Cisco 3.0.0-patch3 (including) 3.0.0-patch3 (including)
Identity_services_engine Cisco 3.0.0-patch4 (including) 3.0.0-patch4 (including)
Identity_services_engine Cisco 3.0.0-patch5 (including) 3.0.0-patch5 (including)
Identity_services_engine Cisco 3.0.0-patch6 (including) 3.0.0-patch6 (including)
Identity_services_engine Cisco 3.1 (including) 3.1 (including)
Identity_services_engine Cisco 3.1-patch1 (including) 3.1-patch1 (including)
Identity_services_engine Cisco 3.1-patch3 (including) 3.1-patch3 (including)
Identity_services_engine Cisco 3.1-patch4 (including) 3.1-patch4 (including)
Identity_services_engine Cisco 3.2 (including) 3.2 (including)

References