CVE-2018-0187 Cisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability

Medium 6.5 Published 23 Jan 2019 Updated 21 Nov 2024

Authenticated attackers can access confidential privileged account information via the Cisco ISE Admin portal, potentially leading to account impersonation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0187?

CVE-2018-0187 is a medium-severity vulnerability in Cisco Identity Services Engine, published on 23 Jan 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain confidential information for privileged accounts. The vulnerability is due to the improper handling of confidential information. An attacker could exploit this vulnerability by logging into the web interface on a vulnerable system. An exploit could allow an attacker to obtain confidential information for privileged accounts. This information could then be used to impersonate or negatively impact the privileged account on the affected system.

Weakness: CWE-200

Which versions are affected by CVE-2018-0187?

It affects 1 product.

Products include Cisco Identity Services Engine.

How do I fix CVE-2018-0187?

No fix has been published for CVE-2018-0187 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0187 being exploited?

There is no known exploitation of CVE-2018-0187 in the wild and no public exploit code.

All Cisco Identity Services Engine vulnerabilities

Sources

Also known as GHSA-jj77-9jr7-4mpq.