Auth bypass in Cisco Identity Services Engine Software
CVE-2019-1851
A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority (CA) Services on ISE. This vulnerability is due to an incorrect implementation of role-based access control (RBAC). An attacker could exploit this vulnerability by crafting a specific HTTP request with administrative credentials. A successful exploit could allow the attacker to generate a certificate that is signed and trusted by the ISE CA with arbitrary attributes. The attacker could use this certificate to access other networks or assets that are protected by certificate authentication.
EPSS: 0.011 (62.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N.
Affected products
- Cisco Identity Services Engine Software — versions unspecified
- Cisco Identity_services_engine — versions 2.2\(0.470\), 2.3\(0.298\), 2.4\(0.357\)
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2019-1851?
- CVE-2019-1851 is a medium-severity vulnerability in Cisco Identity Services Engine Software, classified under Improper Authorization. CVSS score: 6.8/10. Published 2019-05-16.
- How severe is CVE-2019-1851?
- Medium severity. CVSS v3 base score is 6.8 out of 10.