Product:
Cisco Identity Services Engine
Summary
A vulnerability in the licensing features of Cisco Identity Services Engine and Cisco ISE Passive Identity Connector could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information. This vulnerability is due to improper parsing of XML processed by the web-based management interface. An attacker could exploit this vulnerability by uploading a malicious file to the application, potentially allowing access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2026-20029 |
Exploitation
To exploit this vulnerability, an attacker must have valid administrative credentials. The attacker can upload a malicious XML file through the web-based management interface of Cisco ISE or ISE-PIC. If successful, this could allow the attacker to read arbitrary files from the underlying operating system, including sensitive information that should not be accessible even to administrators.
Affected Products
- Cisco Identity Services Engine: A network-based solution for managing user access and security policies.
- Cisco ISE Passive Identity Connector: A component that integrates with Cisco ISE to enhance identity management capabilities.
Mitigation
To mitigate this vulnerability, it is recommended that organizations ensure proper access controls are in place and regularly review administrative privileges. Additionally, keeping the software updated to the latest version can help protect against known vulnerabilities.