CVE-2019-1659 Cisco Prime Infrastructure Certificate Validation Vulnerability
An attacker can intercept and modify network client data via a man-in-the-middle attack due to improper SSL certificate validation in Cisco Prime Infrastructure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1659?
CVE-2019-1659 is a high-severity vulnerability in Cisco Prime Infrastructure, published on 21 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to improper validation of the server SSL certificate when establishing the SSL tunnel with ISE. An attacker could exploit this vulnerability by using a crafted SSL certificate and could then intercept communications between the ISE and PI. A successful exploit could allow the attacker to view and alter potentially sensitive information that the ISE maintains about clients that are connected to the network. This vulnerability affects Cisco Prime Infrastructure Software Releases 2.2 through 3.4.0 when the PI server is integrated with ISE, which is disabled by default.
Weakness: CWE-295
Which versions are affected by CVE-2019-1659?
It affects 1 product.
Products include Cisco Prime Infrastructure.
How do I fix CVE-2019-1659?
No fix has been published for CVE-2019-1659 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1659 being exploited?
There is no known exploitation of CVE-2019-1659 in the wild and no public exploit code.
Other vulnerabilities in Cisco Prime Infrastructure
Sources
Also known as GHSA-5vxf-pm6w-9vfm.