Threats tagged 'ghsa-vwx3-phv6-wmxp'

A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC allows an unauthenticated remote attacker to trigger an administrative reload of the OCSP responder's certificate and key material. This occurs due to missing authentication on a function of the OCSP responder. Exploitation requires sending a crafted request to the affected device. The vulnerability has a medium severity with a CVSS score of 5.3 and does not impact confidentiality or integrity but affects availability by causing a reload. No patch or remediation information is currently provided.