Blind SQL Injection Vulnerabilities in Cisco ISE REST API

CVE-2024-20417

What is CVE-2024-20417?

Multiple vulnerabilities have been identified in the REST API of Cisco Identity Services Engine (ISE), enabling potential blind SQL injection attacks by authenticated, remote attackers. These vulnerabilities arise from inadequate validation of user-supplied input within API calls. An attacker could exploit these weaknesses by sending specially crafted input to the system. Successful exploitation may allow unauthorized access to view or modify sensitive data stored on the affected device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References