CVE-2018-0187

Medium

Description

A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information. An attacker could exploit this vulnerability by logging into the web interface on a vulnerable system. An exploit could allow an attacker to obtain confidential information for privileged accounts. This information could then be used to impersonate or negatively impact the privileged account on the affected system.

SeverityMedium
CVSS6.5
Exploit probability—
ProductCisco Identity Services Engine
PublishedJan 23, 2019
First seenJan 23, 2019

How to fix

Affected products

ProductAffected versionsFixed in
cisco identity_services_engine2.4\(0.901\), 2.4\(0.901.1\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2018-0187 · Cisco Identity Services Engine · Dark Radar