PT-2016-4806 · Cisco · Cisco Firepower Management Center+1

Published 2016-08-18 · Updated 2024-11-26 · CVE-2016-1458

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions 4.x through 5.3.0.2, 5.3.1.x through 5.3.1.1, and 5.4.x through 5.4.0.0 Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.0.2, 5.3.1.x through 5.3.1.1, and 5.4.x through 5.4.0.0

Description The issue allows remote authenticated users to increase user-account privileges via crafted HTTP requests.

Recommendations For Cisco Firepower Management Center versions 4.x through 5.3.0.2, update to version 5.3.0.3 or later. For Cisco Firepower Management Center versions 5.3.1.x through 5.3.1.1, update to version 5.3.1.2 or later. For Cisco Firepower Management Center versions 5.4.x through 5.4.0.0, update to version 5.4.0.1 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.0.2, update to version 5.3.0.3 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 5.3.1.x through 5.3.1.1, update to version 5.3.1.2 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 5.4.x through 5.4.0.0, update to version 5.4.0.1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-1458

Affected Products

Cisco Asa

Cisco Firepower Management Center

References · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-firepower · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1458 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1458 · Security Note
• http://securityfocus.com/bid/92512 · Note