Threats tagged 'ghsa-qwrq-5c2q-3p3m'

A vulnerability in Cisco ISE's RADIUS Policy API endpoints allows an authenticated remote attacker with read-only Administrator privileges to bypass role-based access controls and gain unauthorized read access to sensitive RADIUS Policy information. The flaw arises from improper RBAC permissions on these API endpoints, enabling attackers to circumvent the web management interface and directly access restricted data. This vulnerability has a medium severity rating with a CVSS score of 4.3.