QID 317409

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform privilege escalation attacks to read or modify arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid Administrator-level privileges on the affected device.

Affected Versions:
Prior to version 2.7P10 From 3.0 prior to version 3.0P8 From 3.1 prior to version 3.1P8
From 3.2 prior to version 3.2P3
QID Detection Logic (Authenticated):
The check matches the Cisco ISE version and ise_patch retrieved via Unix Auth using show version command.

Note: This QID does not checks for the ESR and ERS configuration. Hence set as practice.

Successful exploitation could allow an authenticated attacker to perform privilege escalation attacks to read or modify arbitrary files on the underlying operating system.