Threats tagged 'ghsa-877h-9m58-fr39'

A critical vulnerability exists in the REST API of Cisco ISE and Cisco ISE-PIC that allows unauthenticated remote attackers to gain administrative access. The flaw is due to insufficient authorization checks on the REST API web service, enabling attackers to send crafted HTTP requests to the exposed API port. Successful exploitation could lead to reading and modifying configuration and identity data with administrative privileges.