CVE-2024-20515 Cisco Identity Services Engine Information Disclosure Vulnerability

Medium 6.5 Published 2 Oct 2024 Updated 2 Oct 2024

Authenticated attackers with Read-Only Administrator privileges can view sensitive device credentials in the Cisco ISE web interface.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-20515?

CVE-2024-20515 is a medium-severity vulnerability in Cisco Identity Services Engine, published on 2 Oct 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration settings. An attacker with Read-Only Administrator privileges could exploit this vulnerability by browsing to a page that contains sensitive data. A successful exploit could allow the attacker to view device credentials that are normally not visible to Read-Only Administrators.

Weakness: CWE-311

Which versions are affected by CVE-2024-20515?

It affects 1 product.

Products include Cisco Identity Services Engine.

How do I fix CVE-2024-20515?

No fix has been published for CVE-2024-20515 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-20515 being exploited?

There is no known exploitation of CVE-2024-20515 in the wild and no public exploit code.

All Cisco Identity Services Engine vulnerabilities

Sources

Also known as GHSA-6gv4-7fc8-2gm7.