CVE Advisory - Full Disclosure Cisco ISE Path Traversal - Yoroi
Tags
attack-pattern: Data /Etc/Passwd And /Etc/Shadow - T1003.008 File Deletion - T1070.004 File Deletion - T1630.002 Javascript - T1059.007 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Service - T1481 Tool - T1588.002 Vulnerabilities - T1588.006 File Deletion - T1107 Web Service - T1102
Show in Graph
Common Information
Type Value
UUID b74273ba-e1c9-4230-9794-1c8f475e5c1b
Fingerprint 25639b1b4a2247c1
Analysis status DONE
Considered CTI value 0
Text language
Published March 28, 2023, 10:55 a.m.
Added to db June 5, 2023, 2:06 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline CVE Advisory - Full Disclosure Cisco ISE Path Traversal
Title CVE Advisory - Full Disclosure Cisco ISE Path Traversal - Yoroi
Detected Hints/Tags/Attributes 42/1/24
Source URLs
Redirection Url
Details Source https://yoroi.company/research/cve-advisory-full-disclosure-cisco-ise-path-traversal/
URL Provider
Details Provider Source level domain
Details yoroi.company yoroi.company
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 409 ✔ Yoroi https://yoroi.company/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 3 
cve-2022-20822
Details Domain 641 
nvd.nist.gov
Details Domain 7 
software.cisco.com
Details Domain 124 
www.cisco.com
Details Domain 110 
owasp.org
Details Domain 1 
bst.cloudapps.cisco.com
Details File 9 
packages.url
Details File 816 
index.html
Details File 2 
b_ise_admin_31_maintain_monitor.html
Details File 1 
series.html
Details Url 1 
https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ise-path-trav-dz5dpzym
Details Url 1 
https://nvd.nist.gov/vuln/detail/cve-2022-20822
Details Url 1 
https://ciscoise.server/admin/rs/uiapi/diskmngmnt/filedownload?hostname=&filepath=[dir]
Details Url 1 
https://ciscoise.server/admin/rs/uiapi/diskmngmnt/deletefile?hostname=&filepath=[dir]
Details Url 1 
https://ciscoise.server/admin/rs/uiapi/diskmngmnt/getallfile?hostname=&filepath=[dir]
Details Url 1 
https://ciscoise.server/admin
Details Url 1 
https://cisco.server/admin/rs/uiapi/diskmngmnt/getallfile?hostname=[cisco.nameserver
Details Url 6 
https://software.cisco.com/download/home/283801620/type/283802505/release/3.1.0
Details Url 6 
https://software.cisco.com/download/home/283801620/type/283802505/release/3.2.0
Details Url 4 
https://www.cisco.com/c/it_it/products/security/identity-services-engine/index.html
Details Url 3 
https://owasp.org/www-community/attacks/path_traversal
Details Url 2 
https://www.cisco.com/c/en/us/td/docs/security/ise/31/admin_guide/b_ise_admin_3_1/b_ise_admin_31_maintain_monitor.html#task_er4_km5_b4b
Details Url 1 
https://www.cisco.com/c/en/us/support/security/identity-services-engine/series.html
Details Url 1 
https://bst.cloudapps.cisco.com/bugsearch/bug/cscwc62415