VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 21, 2021· Updated Jun 17, 2026

CVE-2021-40123

CVE-2021-40123

Description

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative read-only privileges to download files that should be restricted. This vulnerability is due to incorrect permissions settings on an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to the device. A successful exploit could allow the attacker to download files that should be restricted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

27
  • Cisco Systems, Inc./Identity Services Engine Software26 versions
    cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*+ 25 more
    • cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*range: <=2.6
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch5:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch6:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch7:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch8:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch9:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7\(0.207\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7\(0.356\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7\(0.356\):-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:2.7\(0.903\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:identity_services_engine:3.0\(0.458\):*:*:*:*:*:*:*
    • (no CPE)range: n/a
  • Cisco Systems, Inc./Identity Services Engine Expressllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.