PT-2016-6870 · Cisco · Cisco Firepower Management Center+1

Published 2016-09-12 · Updated 2016-11-28 · CVE-2016-6394

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center and Cisco FireSIGHT System Software versions prior to 6.1.0

Description The issue allows remote attackers to hijack web sessions via a session identifier.

Recommendations For versions prior to 6.1.0, update to version 6.1.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-6394

Affected Products

Cisco Firesight System

Cisco Firepower Management Center

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6394 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6394 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc · Vendor Advisory
• http://securitytracker.com/id/1036757 · Note
• http://securityfocus.com/bid/92825 · Note