Cisco Identity Services Engine CVE-2018-0214 Local Command Injection Vulnerability

Bugtraq ID:	103331
Class:	Input Validation Error
CVE:	CVE-2018-0214
Remote:	No
Local:	Yes
Published:	Mar 07 2018 12:00AM
Updated:	Mar 07 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Identity Services Engine (ISE) 3300 Series Appliances 2.1(102.103) Cisco Identity Services Engine (ISE) 0
Not Vulnerable:

Cisco Identity Services Engine CVE-2018-0214 Local Command Injection Vulnerability

Cisco Identity Services Engine is prone to a local command-injection vulnerability.

An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks.

This issue being tracked by Cisco Bug ID CSCvf49844.

Cisco Identity Services Engine CVE-2018-0214 Local Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Identity Services Engine CVE-2018-0214 Local Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Identity Services Engine CVE-2018-0214 Local Command Injection Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Identity Services Engine Local Command Injection Vulnerability (Cisco)