CVE-2014-0665: The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privilege...

Security readout for executives and security teams

Cisco ISE had an authorization flaw allowing an authenticated, lower-privileged user to download support bundles and access sensitive information, including user database contents. This is mainly an insider or compromised-account risk against an identity/security management platform. Exposure is limited to Cisco ISE Software deployments with vulnerable support-bundle download authorization. The supplied sources do not identify affected versions, deployment prerequisites, or fixed releases. Prioritize validation if Cisco ISE manages corporate network access or contains regulated user data. The issue is not known exploited from the supplied sources, but compromise could expose identity data from a security control plane. Mitigation focus: Check Cisco advisory and Bug ID CSCul83904 for affected and fixed releases.; Limit support-bundle download capability to trusted administrative roles.; Remove unnecessary ISE user accounts and excessive RBAC permissions..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.