Auth bypass in Cisco Identity Services Engine Software
CVE-2019-1851
A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority (CA) Services on ISE. This vulnerability is due to an incorrect implementation of role-based access control (RBAC). An attacker could exploit this vulnerability by crafting a specific HTTP request with administrative credentials. A successful exploit could allow the attacker to generate a certificate that is signed and trusted by the ISE CA with arbitrary attributes. The attacker could use this certificate to access other networks or assets that are protected by certificate authentication.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.011 (64.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 64.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: -0.000
Affected products
- Cisco Identity Services Engine Software — versions unspecified
- Cisco Identity Services Engine — versions 2.4(0.357), 2.2\(0.470\), 2.3\(0.298\)
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515… (vendor-advisory, Vendor Advisory)
- www.securityfocus.com/bid/108356 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2019-1851?
- CVE-2019-1851 is a medium-severity vulnerability in Cisco Identity Services Engine Software, classified under Improper Authorization. CVSS score: 6.8/10. Published 2019-05-16.
- How severe is CVE-2019-1851?
- Medium severity. CVSS v3 base score is 6.8 out of 10.