Cisco Identity Services Engine Authorization Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco (ISE) could allow an authenticated, remote attacker to bypass authorization mechanisms for specific administrative functions.
This is due insufficient enforcement users created by SAML SSO integration with external identity provider. An exploit this submitting a series commands affected device. A successful modify limited number system settings, including some that would result restart. In single-node ISE deployments, devices are not authenticated network will be able authenticate until comes back online.
Cisco has released software updates address vulnerability. There no workarounds vulnerability.
This advisory available at following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-mVfKVQAU
<br/>Security Impact Rating: Medium
<br/>CVE: CVE-2025-20264
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-mVfKVQAU CISCO