Web Interface Vulnerability in Cisco Identity Services Engine

CVE-2025-20332

What is CVE-2025-20332?

A vulnerability has been identified in the web-based management interface of Cisco Identity Services Engine (ISE). This issue arises from insufficient server-side validation of Administrator permissions, which may allow an attacker with valid read-only Administrator credentials to execute crafted HTTP requests. If successfully exploited, this vulnerability could enable the attacker to alter specific configuration details, such as file descriptions, on the affected device. It is crucial for organizations using Cisco ISE to assess their configurations and consider appropriate security measures to mitigate such risks.

References