Cisco Systems, Inc. - Identity Services Engine (ISE) - File Manipulation | Privilege Escalation

extern.daniel.ramalho@t-system — Wed, 06 Feb 2019 13:18:58 GMT

Good morning gentlemen,
What recommendation could CISCO give us for a question below?
Description
-----------
The Cisco Identity Services Engine (ISE) contains a flaw that is triggered by multiple critical files that are given insecure file permissions. This may allow a local attacker to make changes to these files and gain elevated, root privileges.
Affected System
---------------
Cisco Systems, Inc. -> Identity Services Engine (ISE) -> 2.4 (0.357)
Solution
(I.e.
Currently we are not aware of any solution. Please contact the vendor for further information.

Awaiting,

Daniel Ramalho

Re: Cisco Systems, Inc. - Identity Services Engine (ISE) - File Manipulation | Privilege Escalation

Jason Kunst — Wed, 06 Feb 2019 14:56:18 GMT

You need to contact the TAC for any vulnerability discussions

topic Re: Cisco Systems, Inc. - Identity Services Engine (ISE) - File Manipulation | Privilege Escalation in Network Access Control

Cisco Systems, Inc. - Identity Services Engine (ISE) - File Manipulation | Privilege Escalation

Re: Cisco Systems, Inc. - Identity Services Engine (ISE) - File Manipulation | Privilege Escalation