{"metadata": {"vulnerability": "CVE-2024-20296", "count": 32, "kinds": {"milestone": 8, "sighting": 2, "kev": 0, "other": 22}}, "data": [{"timestamp": "2023-11-08T15:08:07.629Z", "date_only": false, "value": "2023-11-08T15:08:07.629Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-20296", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:43.170Z", "date_only": false, "value": "2023-12-13T01:21:43.170595Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-20296", "record": "GSD-2024-20296", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-07-17T00:00:00Z", "date_only": true, "value": "2024-07-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0602", "record": "CERTFR-2024-AVI-0602", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-17T00:00:00Z", "date_only": false, "value": "2024-07-17T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20296", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-17T00:00:00Z", "date_only": false, "value": "2024-07-17T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20296", "record": "FKIE_CVE-2024-20296", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-17T16:00:00Z", "date_only": false, "value": "2024-07-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "record": "CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-17T16:00:00Z", "date_only": false, "value": "2024-07-17T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "record": "CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-17T16:00:00Z", "date_only": false, "value": "2024-07-17T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "record": "CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-17T16:00:03Z", "date_only": false, "value": "2024-07-17T16:00:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "record": "CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-17T16:00:30Z", "date_only": false, "value": "2024-07-17T16:00:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "record": "CISCO-SA-ISE-FILE-UPLOAD-KRW2TXA9", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-17T16:28:22.193Z", "date_only": false, "value": "2024-07-17T16:28:22.193Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-20296", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-17T16:28:22.193Z", "date_only": false, "value": "2024-07-17T16:28:22.193Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2024-20296", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-17T17:15:12Z", "date_only": false, "value": "2024-07-17T17:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MGJ5-J889-643M", "record": "GHSA-MGJ5-J889-643M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-17T17:15:12.367Z", "date_only": false, "value": "2024-07-17T17:15:12.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20296", "record": "FKIE_CVE-2024-20296", "field": "published"}, {"timestamp": "2024-07-17T18:31:00Z", "date_only": false, "value": "2024-07-17T18:31:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGJ5-J889-643M", "record": "GHSA-MGJ5-J889-643M", "field": "published"}, {"timestamp": "2024-07-17T18:31:00Z", "date_only": false, "value": "2024-07-17T18:31:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MGJ5-J889-643M", "record": "GHSA-MGJ5-J889-643M", "field": "modified"}, {"timestamp": "2024-07-17T19:53:57Z", "date_only": false, "value": "2024-07-17T19:53:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1110", "record": "CVE-2024-20296", "field": "creation_timestamp", "uuid": "5a14d803-f37b-4edc-b365-3abca210cf34", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-20296 - \"Cisco ISE Arbitrary File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-20296 \nPublished : July 17, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected device.  \n  \n This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by uploading arbitrary files to an affected device. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1110"}, {"timestamp": "2024-07-17T22:00:00Z", "date_only": false, "value": "2024-07-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1665", "record": "WID-SEC-W-2024-1665", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-17T22:00:00Z", "date_only": false, "value": "2024-07-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1665", "record": "WID-SEC-W-2024-1665", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-17T22:00:00Z", "date_only": false, "value": "2024-07-17T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1665", "record": "WID-SEC-W-2024-1665", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-17T22:00:00Z", "date_only": false, "value": "2024-07-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1665", "record": "WID-SEC-W-2024-1665", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-18T00:00:00Z", "date_only": false, "value": "2024-07-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0602", "record": "CERTFR-2024-AVI-0602", "field": "last_revision_date"}, {"timestamp": "2024-07-18T00:00:00Z", "date_only": false, "value": "2024-07-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0602", "record": "CERTFR-2024-AVI-0602", "field": "initial_release_date"}, {"timestamp": "2024-07-18T00:00:00Z", "date_only": false, "value": "2024-07-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0602", "record": "CERTFR-2024-AVI-0602", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-18T03:55:22.366Z", "date_only": false, "value": "2024-07-18T03:55:22.366Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20296", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-18T11:16:31Z", "date_only": false, "value": "2024-07-18T11:16:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1343", "record": "CVE-2024-20296", "field": "creation_timestamp", "uuid": "20bdfa8e-86fb-427b-b17e-0dc8e124fc51", "content": "\ud83d\udd25 10 CVE \u043e\u0442 Cisco, \u043e\u0434\u043d\u0430 \u0441 CVSS 10\n\nCisco Patch Wednesday \u043f\u0440\u043e\u0448\u0451\u043b \u0441 \u043e\u0433\u043e\u043d\u044c\u043a\u043e\u043c \u2014 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0425\u0435\u0434\u043b\u0430\u0439\u043d\u0435\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u0435\u043c CVE-2024-20401 \u0441 CVSS 9.8, \u044d\u0442\u043e \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 Secure Email Gateway, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0449\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u043f\u0440\u0438\u0441\u043b\u0430\u0432\u0448\u0438\u0439 \u043f\u0438\u0441\u044c\u043c\u043e \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043c\u0435\u043d\u044f\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u044f DoS. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0448\u043b\u044e\u0437\u0435 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a\u043e\u043d\u0442\u0435\u043d\u0442-\u0444\u0438\u043b\u044c\u0442\u0440 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0444\u0430\u0439\u043b\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e Cisco Advanced Malware Protection. \ud83e\udd2a\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440 \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043e, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b, \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0431\u044b\u043b\u043e \u2014 \u043f\u043e\u043a\u0430.\n\n\u0414\u0435\u0444\u0435\u043a\u0442 \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 10 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 Smart Software Manager On-Prem, \u043c\u043e\u0434\u0443\u043b\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u044f\u043c\u0438 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Cisco.  CVE-2024-20419 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0437\u0430\u0439\u0442\u0438 \u0432 web UI \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f API \u0441 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c, \u0438, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u0438\u0440\u043e\u0434\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0413\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0434\u0435\u043b\u044f\u0442\u0441\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438-\u0441\u0435\u0442\u0435\u0432\u0438\u043a\u0438 \u2014 \u044d\u0442\u043e DoS \u043f\u0443\u0442\u0451\u043c \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0438 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c, \u044d\u0442\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f BlastRADIUS (CVE-2024-3596), \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d \u0434\u0435\u0444\u0435\u043a\u0442 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Secure Web Appliance (CVE-2024-20435) \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 Identity Services Engine (CVE-2024-20296).\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Cisco @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1343"}, {"timestamp": "2024-07-24T00:00:00Z", "date_only": true, "value": "2024-07-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-37704", "record": "CNVD-2024-37704", "field": "submitTime"}, {"timestamp": "2024-08-01T21:59:41.103Z", "date_only": false, "value": "2024-08-01T21:59:41.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-20296", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:59:41.103Z", "date_only": false, "value": "2024-08-01T21:59:41.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-20296", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:11:34.288Z", "date_only": false, "value": "2024-08-15T18:11:34.288+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1665", "record": "WID-SEC-W-2024-1665", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-05T00:00:00Z", "date_only": true, "value": "2024-09-05", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-37704", "record": "CNVD-2024-37704", "field": "openTime"}, {"timestamp": "2026-06-17T07:06:18.657Z", "date_only": false, "value": "2026-06-17T07:06:18.657", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20296", "record": "FKIE_CVE-2024-20296", "field": "lastModified"}]}