جزئیات آسیب‌پذیری
CVE-2026-20192
Cisco ISE Passive Identity ConnectorCisco Identity Services Engine Software
Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
CVSS 3.1
10.0بحرانی
شرح رسمی (انگلیسی)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 10.0بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco ISE Passive Identity Connector | 3.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco ISE Passive Identity Connector | 3.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco ISE Passive Identity Connector | 3.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco ISE Passive Identity Connector | 3.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco ISE Passive Identity Connector | 3.5.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p72 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.1.0 p9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2 Patch 10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2 Patch 8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2 Patch 9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.2.0 p7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3 Patch 9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4 Patch 1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4 Patch 2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4 Patch 3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4 Patch 4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4 Patch 5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4 Patch 6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.5 Patch 1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.5 Patch 2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.5 Patch 3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Identity Services Engine Software | 3.5.0 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۶/۲۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
۰٫۴۶٪
احتمال بهره‌برداری در ۳۰ روز
۴۰٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-284Improper Access Control