CVE-2022-20956

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based management interface of an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to list, download, and delete certain files that they should not have access to. Cisco plans to release software updates that address this vulnerability. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-access-contol-EeufSUCx ["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-access-contol-EeufSUCx"]

• CWE-648

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-access-contol-EeufSUCx
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-access-contol-EeufSUCx

Published

Nov 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20950A vulnerability in the interaction of SIP and Snort 3 for Ci…5.3
• CVE-2022-20951A vulnerability in the web-based management interface of Cis…6.5
• CVE-2022-20952A vulnerability in the scanning engines of Cisco AsyncOS Sof…5.3
• CVE-2022-20953Multiple vulnerabilities in Cisco TelePresence Collaboration…5.5
• CVE-2022-20954Multiple vulnerabilities in Cisco TelePresence Collaboration…7.1
• CVE-2022-20955Multiple vulnerabilities in Cisco TelePresence Collaboration…7.1
• CVE-2022-20958A vulnerability in the web-based management interface of Cis…8.8
• CVE-2022-20959A vulnerability in the External RESTful Services (ERS) API o…5.4
• CVE-2022-20960A vulnerability in Cisco AsyncOS Software for Cisco Email Se…7.5
• CVE-2022-20961A vulnerability in the web-based management interface of Cis…8.8
• CVE-2022-20962A vulnerability in the Localdisk Management feature of Cisco…8.8
• CVE-2022-20963A vulnerability in the web-based management interface of Cis…5.4