| An XML External Entity Injection Vulnerability has been reported in Cisco Identity Service Engine. The vulnerability is due to improper validation of user data in multiple endpoints within the MnTRESTLivelogService class. A remote, authenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in an attacker reading arbitrary files from the server. |
