CVE-2023-20111 — Vulnetix

CVE-2023-20111 PUBLISHED

Es existiert eine Schwachstelle in Cisco Identity Services Engine (ISE). Vertrauliche Informationen werden im web-basierten Management-Interface nicht sachgemäß gespeichert. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen.

EPSS 0.19% · 40.5th percentile

Risk Scores

EPSS Score

0.19%

40.5th percentile

Exploit Intelligence

cisco-sa-ise-credentials-tkTO3h3 (circl)

Timeline

Aug 16, 2023 CVE Published
Aug 18, 2023 EPSS Score
Sep 20, 2023 EPSS Score
Oct 24, 2023 EPSS Score
Nov 26, 2023 EPSS Score
Dec 29, 2023 EPSS Score
Feb 1, 2024 EPSS Score
Mar 5, 2024 EPSS Score
Apr 7, 2024 EPSS Score
May 10, 2024 EPSS Score
Jun 13, 2024 EPSS Score
Jul 16, 2024 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2073.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2073 advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-credentials-tkTO3h3 advisory

Open in Interactive Console →