CVE-2019-15282

Cisco Identity Services Engine Information Disclosure Vulnerability

MEDIUM

5.3

CVSS Score

Published: October 16, 2019 at 06:36 PM UTC

Updated: June 17, 2026 at 02:20 AM UTC

1 product affected across 1 vendorIdentity Services Engine

Using Cisco Identity Services Engine Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Identity Services Engine Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web interface. A successful exploit could allow the attacker to read a tcpdump file generated with a particular naming scheme.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Identity Services Engine · Cisco

95%

v < 2.4(0.357)2.4(0.357)2.4(0.357) patch12.4(0.357) patch22.4(0.357) patch32.4(0.357) patch42.4(0.357) patch52.4(0.357) patch62.4(0.357) patch72.4(0.357) patch82.4(0.357) patch9

Affected range stops below 2.4(0.357), so it looks safe — our inference, not a vendor statement