CVE-2021-40123— Cisco Identity Services Engine 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-40123の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Identity Services Engine File Download Vulnerability
ソース: CVE Program / CVE List V5
脆弱性説明
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only privileges to download files that should be restricted. This vulnerability is due to incorrect permissions settings on an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to the device. A successful exploit could allow the attacker to download files that should be restricted.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
特权授予不正确
ソース: CVE Program / CVE List V5
脆弱性タイトル
Cisco Identity Services Engine 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Identity Services Engine（ISE）是美国思科（Cisco）公司的一款基于身份的环境感知平台（ISE身份服务引擎）。该平台通过收集网络、用户和设备中的实时信息，制定并实施相应策略来监管网络。 Cisco Identity Services Engine (ISE) 存在安全漏洞，该漏洞源于思科身份服务引擎(ISE)基于web的管理界面上存在错误权限设置造成的。攻击者可利用该漏洞向设备发送精心设计的HTTP请求来利用这个漏洞。成功的攻击可以允许攻击者可利用该漏洞下载应该受到
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Identity Services Engine Software | n/a | - |
II. CVE-2021-40123の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-40123のインテリジェンス情報
请登录查看更多情报信息。
CVE-2021-40123 厂商安全公告 (1)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-file-download-B3BR5KQAvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2021-10-21 · 9 CVEs total
| CVE-2021-1529 | 7.8 HIGH | Cisco IOS XE SD-WAN Software Command Injection Vulnerability |
| CVE-2021-40121 | 6.1 MEDIUM | Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities |
| CVE-2021-34738 | 6.1 MEDIUM | Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities |
| CVE-2021-40122 | 5.9 MEDIUM | Cisco Meeting Server Call Bridge Denial of Service Vulnerability |
| CVE-2021-34736 | 5.3 MEDIUM | Cisco Integrated Management Controller GUI Denial of Service Vulnerability |
| CVE-2021-34789 | 4.8 MEDIUM | Cisco Tetration Stored Cross-Site Scripting Vulnerability |
| CVE-2021-34743 | 4.3 MEDIUM | Cisco Webex Software Application Authorization Bypass Vulnerability |
| CVE-2021-34760 | Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability |
IV. 関連脆弱性
- CVE-2026-20146
Cisco Identity Services Engine Path Traversal Vulnerability - CVE-2026-20190
Cisco Identity Services Engine Information Disclosure Vulner - CVE-2026-20181
Cisco Identity Services Engine Remote Code Execution Vulnera - CVE-2026-20193
Cisco Identity Services Engine Authentication Bypass Vulnera - CVE-2026-20195
Cisco Identity Services Engine Observable Response Discrepan
同じベンダー: Cisco
- CVE-2026-20313
Cisco Catalyst SD-WAN Security Hardening Release - Memory Co - CVE-2026-20311
Cisco IOS XE Software Web UI Denial of Service Vulnerability - CVE-2026-20289
Cisco RoomOS Logging Subsystem Information Disclosure Vulner - CVE-2026-20312
Cisco Catalyst SD-WAN Security Hardening Release - Informati - CVE-2026-20310
Cisco SD-WAN Software Security Hardening Release - Improper
同じ弱点: CWE-266
- CVE-2026-66662
WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - P - CVE-2026-65559
WordPress Order Delivery Date for WooCommerce plugin <= 4.6. - CVE-2026-65507
WordPress AIWU plugin <= 1.5.6 - Privilege Escalation vulner - CVE-2026-28183
WordPress PublishPress Capabilities plugin <= 2.45.0 - Privi - CVE-2026-28111
WordPress Forminator plugin <= 1.56.0 - Privilege Escalation
V. CVE-2021-40123へのコメント
まだコメントはありません