PT-2015-3043 · Cisco · Cisco Firepower Extensible Operating System

Published 2015-11-18 · Updated 2015-11-19 · CVE-2015-6373

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System version 1.1(1.160)

Description The issue is related to a cross-site request forgery (CSRF) vulnerability. This vulnerability can be exploited by a remote attacker to gain access to the authentication data of arbitrary users. CSRF is a type of attack that tricks a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For Cisco Firepower Extensible Operating System version 1.1(1.160), consider restricting access to the authentication module to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the vulnerable API endpoints related to user authentication until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2016-00248

CVE-2015-6373

Affected Products

Cisco Firepower Extensible Operating System

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6373 · Security Note
• https://bdu.fstec.ru/vul/2016-00248 · Security Note