Threats tagged 'ghsa-g667-85qx-4vfr'

A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) allows an unauthenticated remote attacker to obtain an endpoint identity certificate by bypassing authorization checks. This issue arises from improper authorization validation and can be exploited by sending a crafted request to the affected device. The vulnerability has a medium severity rating with a CVSS score of 5.3.