PT-2016-6894 · Cisco · Firesight System

Publicado 2016-10-05 · Atualizado 2017-07-30 · CVE-2016-6420

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 4.10.3 through 5.4.0

Description The issue allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request.

Recommendations For versions 4.10.3 through 5.4.0, consider restricting access to the system until a patch is available to prevent unauthorized privilege escalation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-264

Identificadores relacionados

CVE-2016-6420

Produtos afetados

Firesight System

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-6420 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6420 · Nota de Segurança
• http://securityfocus.com/bid/93204 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1 · Aviso do Fabricante
• http://securitytracker.com/id/1036919 · Nota