CVE:CVE-2020-3467
CNNVD:CNNVD-202010-234
Cisco Identity Services Engine（ISE）是美国思科（Cisco）公司的一款基于身份的环境感知平台（ISE身份服务引擎）。该平台通过收集网络、用户和设备中的实时信息，制定并实施相应策略来监管网络。
Cisco Identity Services Engine (ISE) 存在安全漏洞，攻击者可利用该漏洞修改部分的配置。修改后的配置可以允许未经授权的设备到网络或防止授权的设备访问网络。
solution:Upgrade cisco identity_services_engine to a higher version than 2.4,2.4(0.357,2.4.0.357:patch1,2.4.0.357:patch10,2.4.0.357:patch11,2.4.0.357:patch12,2.4.0.357:patch2,2.4.0.357:patch3,2.4.0.357:patch4,2.4.0.357:patch5,2.4.0.357:patch6,2.4.0.357:patch7,2.4.0.357:patch8,2.4.0.357:patch9,2.5,2.6(0.156,2.6.0,2.6.0.156:patch1,2.6.0.156:patch2,2.6.0.156:patch3,2.6.0.156:patch5,2.6.0.156:patch6,2.7,2.7(0.356,2.7.0.356:patch1,and avoid the version (,2.4],2.4(0.357),2.4.0.357:patch1,2.4.0.357:patch10,2.4.0.357:patch11,2.4.0.357:patch12,2.4.0.357:patch2,2.4.0.357:patch3,2.4.0.357:patch4,2.4.0.357:patch5,2.4.0.357:patch6,2.4.0.357:patch7,2.4.0.357:patch8,2.4.0.357:patch9,2.5,2.6(0.156),2.6.0,2.6.0.156:patch1,2.6.0.156:patch2,2.6.0.156:patch3,2.6.0.156:patch5,2.6.0.156:patch6,2.7,2.7(0.356),2.7.0.356:patch1