QID 317325

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF) attack through an affected device.

Affected Versions:
2.7 and earlier
3.0 prior to 3.0P8
3.1 prior to 3.1P7
3.2 prior to 3.2P2
QID Detection Logic (Authenticated):
The check matches the Cisco ISE version and ise_patch retrieved via Unix Auth using "show version" command.

A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of confidential information.