CVE-2023-20174

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF) attack through an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS v3 4.9 MEDIUM

4.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-696OZTCm	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:identity_services_engine::::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:-::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch3::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch4::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch5::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch6::::::
	cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch7::::::
	cpe:2.3:a:cisco:identity_services_engine:3.1:-::::::
	cpe:2.3:a:cisco:identity_services_engine:3.1:patch1::::::
	cpe:2.3:a:cisco:identity_services_engine:3.1:patch3::::::
	cpe:2.3:a:cisco:identity_services_engine:3.1:patch4::::::
	cpe:2.3:a:cisco:identity_services_engine:3.1:patch5::::::
	cpe:2.3:a:cisco:identity_services_engine:3.1:patch6::::::
	cpe:2.3:a:cisco:identity_services_engine:3.2:-::::::
	cpe:2.3:a:cisco:identity_services_engine:3.2:patch1::::::

History

No history.

Information

Published : 2023-05-18 03:15

Updated : 2023-11-07 04:06

NVD link : CVE-2023-20174

Mitre link : CVE-2023-20174

CVE.ORG link : CVE-2023-20174

JSON object : View

Products Affected

cisco

identity_services_engine

CWE

CWE-611

Improper Restriction of XML External Entity Reference

{"id": "CVE-2023-20174", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}, {"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2023-05-18T03:15:10.957", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-inj-696OZTCm", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-611"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-611"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF) attack through an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory."}], "lastModified": "2023-11-07T04:06:23.590", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87A71033-EC44-4646-988E-DF1143C12682", "versionEndExcluding": "3.0.0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1063044-BCD7-487F-9880-141C30547E36"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA42E65A-7207-48B8-BE1B-0B352201BC09"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75DDAF38-4D5F-4EE4-A428-68D28FC0DA96"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5FB6AA6-F8C9-48A6-BDDA-1D25C43564EB"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B3A267A-5FEA-426D-903E-BD3F4F94A1A4"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1B3207B-1B9C-41AA-8EF6-8478458462E7"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5B9E7F3-B0F2-4A6A-B939-A62E9B12CCEB"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF4C5A58-D0AE-48D6-9757-18C1D5BE5070"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4DB9726-532F-45CE-81FD-45F2F6C7CE51"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E8F0066-0EC0-41FD-80BE-55C4ED5F6B0E"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D1765DB-1BEF-4CE9-8B86-B91F709600EB"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D1E80EF-C3FD-4F7A-B63D-0EAA5C878B11"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "095F27EC-5713-4D4F-AD06-57D3DF068B90"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEA5210C-E674-4C4B-9EB3-C681C70005B6"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36722B6C-64A5-4D00-94E1-442878C37A35"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EEEA06A-AD58-48D3-8975-B21A961985B3"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}