Cisco Identity Services Engine Arbitrary File Upload Vulnerability

A vulnerability exists in the Cisco Identity Services Engine (ISE) GUI, allowing authenticated, remote attackers with administrative privileges to upload files to affected devices. This issue arises from improper validation in the file copy function. Exploitation of this vulnerability could enable the upload of arbitrary files to the system.

Impact

Successful exploitation allows for arbitrary file uploads to the affected system.

Remediation

Cisco has released software updates to address this vulnerability. For information on which releases include the fix, consult the Cisco ISE advisory or the Cisco Security Advisories page.