This vulnerability in Cisco Identity Services Engine software involves an identity management API endpoint that returns distinguishable error messages when queried with crafted requests. An unauthenticated remote attacker can exploit this behavior to enumerate valid user accounts by analyzing the response discrepancies. The vulnerability affects a broad range of Cisco ISE versions from 3.3.0 to 3.5 Patch 3. The CVSS 3.1 base score is 5.3 (medium), with attack vector network, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or remediation guidance is currently available from Cisco, and no known exploits have been observed in the wild.

Successful exploitation allows an unauthenticated attacker to obtain a list of valid usernames on the affected Cisco ISE system. This information disclosure could aid further targeted attacks such as brute force or social engineering. There is no direct impact on system integrity or availability reported. The medium severity rating reflects the confidentiality impact only.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, organizations should monitor Cisco advisories for updates. Until a patch is available, consider restricting access to the affected API endpoint to trusted networks or authenticated users where possible to reduce exposure.