CVE-2019-1659— Cisco Prime Infrastructure Software 信任管理问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2019-1659の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Prime Infrastructure Certificate Validation Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to improper validation of the server SSL certificate when establishing the SSL tunnel with ISE. An attacker could exploit this vulnerability by using a crafted SSL certificate and could then intercept communications between the ISE and PI. A successful exploit could allow the attacker to view and alter potentially sensitive information that the ISE maintains about clients that are connected to the network. This vulnerability affects Cisco Prime Infrastructure Software Releases 2.2 through 3.4.0 when the PI server is integrated with ISE, which is disabled by default.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
证书验证不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco Prime Infrastructure Software 信任管理问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Prime Infrastructure Software是美国思科（Cisco）公司的一套基础网络生命周期管理解决方案。该产品集成了Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）。 Cisco Prime Infrastructure Software 2.2B版本至3.4.0版本中的 Identity Services Engine (ISE) integration功能存在信
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Prime Infrastructure | next of 2.2 ~ unspecified | - |
II. CVE-2019-1659の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2019-1659のインテリジェンス情報
请登录查看更多情报信息。
CVE-2019-1659 厂商安全公告 (2)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-prime-validationvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2019-02-21 · 12 CVEs total
| CVE-2019-1662 | Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability | |
| CVE-2019-1664 | Cisco HyperFlex Software Unauthenticated Root Access Vulnerability | |
| CVE-2019-1665 | Cisco Hyperflex Stored Cross-Site Scripting Vulnerability | |
| CVE-2019-1666 | Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability | |
| CVE-2019-1667 | Cisco HyperFlex Arbitrary Statistics Write Vulnerability | |
| CVE-2019-1681 | Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability | |
| CVE-2019-1684 | Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Prot | |
| CVE-2019-1685 | Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability | |
| CVE-2019-1691 | Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability | |
| CVE-2019-1698 | Cisco IoT Field Network Director XML External Entity Vulnerability | |
| CVE-2019-1700 | Cisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge |
IV. 関連脆弱性
- CVE-2026-20189
Cisco Prime Infrastructure Information Disclosure Vulnerabil - CVE-2026-20111
Cisco Prime Infrastructure Stored Cross-Site Scripting Vulne - CVE-2025-20203
Cisco Evolved Programmable Network Manager和Cisco Prime Infra - CVE-2025-20120
Cisco Evolved Programmable Network Manager和Cisco Prime Infra - CVE-2023-20260
Cisco Evolved Programmable Network Manager和Cisco Prime Infra
同じベンダー: Cisco
- CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Condit - CVE-2026-20158
Cisco RoomOS Security Hardening Release - Resource Lifetime - CVE-2026-20153
Cisco RoomOS Security Hardening Release - Input Validation V - CVE-2026-20157
Cisco RoomOS Security Hardening Release - Missing Encryption - CVE-2026-20156
Cisco RoomOS Security Hardening Release - Buffer Management
同じ弱点: CWE-295
- CVE-2026-13410
Dancer::Plugin::Auth::Google versions through 0.07 for Perl - CVE-2026-50302
Windows Cryptographic Services Security Feature Bypass Vulne - CVE-2026-47632
Azure Monitor Agent Metrics Extension Elevation of Privilege - CVE-2026-55001
Active Directory Domain Services Elevation of Privilege Vuln - CVE-2026-59836
Fortinet FortiClientEMS 加密问题漏洞
V. CVE-2019-1659へのコメント
まだコメントはありません