CVE-2023-20194

CVE-2023-20194 is a medium-severity vulnerability in the ERS API of Cisco Identity Services Engine (ISE) that allows an authenticated, remote attacker with Administrator-level privileges to read arbitrary files on the underlying operating system. This improper privilege management could lead to privilege escalation and access to sensitive information. The vulnerability has a CVSS score of 4.9 (Medium) and requires high privileges for exploitation, but has low attack complexity. There is currently no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.