CVE-2021-1416

{"id": "CVE-2021-1416", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2021-02-17T17:15:14.550", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-266"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An attacker with read-only administrator access to the Admin portal could exploit these vulnerabilities by browsing to one of the pages that contains sensitive data. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system. For more information about these vulnerabilities, see the Details section of this advisory."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en el portal de Administraci\u00f3n de Cisco Identity Services Engine (ISE), podr\u00edan permitir a un atacante remoto autenticado obtener informaci\u00f3n confidencial. Estas vulnerabilidades son debido a una aplicaci\u00f3n inapropiada de los niveles de privilegios del administrador para datos confidenciales. Un atacante con acceso de administrador de solo lectura al portal de administraci\u00f3n podr\u00eda explotar estas vulnerabilidades al navegar en una de las p\u00e1ginas que contiene datos confidenciales. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante recopilar informaci\u00f3n confidencial sobre la configuraci\u00f3n del sistema. Para obtener m\u00e1s informaci\u00f3n sobre estas vulnerabilidades, consulte la secci\u00f3n Detalles de este aviso"}], "lastModified": "2024-11-21T05:44:18.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3115779E-040F-457B-AE4D-8685A59DB1A1", "versionEndExcluding": "2.3.0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C2FE2F6-5AE9-4A7C-B3A1-ADBCF2943E68"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BBADFC2-2932-47F7-A547-B5248D1D1A5C"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A829408-50C6-42D7-AFF9-86B965FD069F"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6127E2E2-203B-41BF-ADB8-ACA28D12C13C"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AD91197-CEBB-41A5-B1D9-46ADC0C3F12D"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49910CE9-E408-49B0-9FB1-0D5CAEE2F0A0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B587597C-3F72-4E5D-A965-DF7C5E2F0014"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F4F2F0A-6525-4C41-B67F-989BD67AF376"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "439948AD-C95D-4FC3-ADD1-C3D241529F12"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "934E62A3-4968-484A-8ECC-70027DC70C35"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84A3C461-ADFC-4352-86F8-06E32F762BEC"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47989AE7-2B37-4424-80CD-61C48599100D"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5D220CF-8178-4F26-B1C3-175A10EBD65B"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16A0985C-38A7-401D-9BE1-4FB06105416D"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62B24B6A-1AAA-491E-BD23-4841B101E6EA"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0CF4B74-F6A8-4D90-87A2-888708B4590C"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AF76083-7F81-4470-B363-083144609686"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6973D7D-6638-4E86-A28A-0CEA425C53E5"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D52BC38C-69B9-483D-B975-B7C27CFBA336"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F3BA3F0-8635-439D-9B77-0B7713FBF8A3"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5923013-0A76-4109-A58C-62754D7CF0FC"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65B47822-FED9-4073-885C-9228599C036D"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B45856E-6BE4-40A7-AE2F-4F9DC9315875"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F6D1780-3306-4481-A3CD-8F7732D955CC"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07BF9702-0607-49A1-A82A-E4ADF1A4135F"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11AA4EC0-6F3C-45A9-9AA4-0D81876F44B5"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B4B88F0-3229-4B07-9308-C37C794595A0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E02F0E61-FBFF-4C6D-9132-E266FF67802B"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "541EC483-540A-4080-AA69-82A0F30EE3D6"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66CAFE97-295F-48F7-A92C-A90D3B837483"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F22FABF-2831-4895-B0A9-283B98398F43"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2887A2C0-BADA-41D3-AA6A-F10BC58AA7F9"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1063044-BCD7-487F-9880-141C30547E36"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA42E65A-7207-48B8-BE1B-0B352201BC09"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}