PT-2015-4828 · Cisco · Firesight Management Center+1

Publicado 2015-04-23 · Atualizado 2015-04-23 · CVE-2015-0707

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.1 through 6.0.0

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter. This affects the FireSIGHT Management Center.

Recommendations For version 5.3.1.1, update to a version that fixes the issue. For version 6.0.0, update to a version that fixes the issue. As a temporary workaround, consider restricting access to the affected parameter to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-0707

Produtos afetados

Firesight Management Center

Firesight System

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-0707 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38487 · Aviso do Fabricante