A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE server. An attacker could exploit this vulnerability by supplying a crafted certificate and could then intercept communications between the ISE and DNA Center. A successful exploit could allow the attacker to view and alter sensitive information that the ISE maintains about clients that are connected to the network.
Metrics
Affected Vendors & Products
References
History
Thu, 07 Nov 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2021-06-29T03:05:12.076205Z
Updated: 2024-11-07T22:07:44.247Z
Reserved: 2020-11-13T00:00:00
Link: CVE-2021-1134
Vulnrichment
Updated: 2024-08-03T16:02:55.414Z
NVD
Status : Analyzed
Published: 2021-06-29T03:15:06.890
Modified: 2021-07-02T15:34:48.493
Link: CVE-2021-1134
Redhat
No data.