Threats tagged 'ghsa-mc6q-xfc2-72q5'

A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE allows an unauthenticated, adjacent attacker to hijack another user's onboarding session and access protected 802.1X networks. This occurs due to insufficient authentication checks during user onboarding. Exploitation involves spoofing the legitimate user and triggering a redirection to the guest web portal, enabling session takeover. The vulnerability has a low CVSS score of 3.8 and does not impact confidentiality or availability but can cause limited integrity loss. No patch or remediation information is provided.