PT-2015-7236 · Cisco · Cisco Firepower Management Center

Published 2015-12-15 · Updated 2024-11-26 · CVE-2015-6411

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco FirePOWER Management Center versions 5.4.1.3, 6.0.0, and 6.0.1

Description The issue allows remote attackers to obtain potentially sensitive version information by reading an unspecified field. This occurs because the Cisco FirePOWER Management Center provides verbose responses to requests for help files.

Recommendations For version 5.4.1.3, update to a version that does not provide verbose responses to help file requests. For version 6.0.0, update to a version that does not provide verbose responses to help file requests. For version 6.0.1, update to a version that does not provide verbose responses to help file requests.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-6411

Affected Products

Cisco Firepower Management Center

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-fmc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6411 · Security Note
• http://securityfocus.com/bid/78740 · Note