Data Exposure Vulnerability in Cisco ISE Management Interface

CVE-2025-20305

What is CVE-2025-20305?

A security flaw in the web-based management interface of Cisco Identity Services Engine (ISE) could enable an authenticated remote attacker to disclose sensitive information. This vulnerability arises from inadequate data protection measures in certain files. Specifically, an attacker with read-only Administrator privileges can exploit the issue by executing actions that yield results typically restricted to high-privileged users. If successful, the attacker might view passwords and other confidential data that should remain hidden from less privileged accounts.

References