PT-2021-1643 · Cisco · Cisco Firepower Management Center

Published 2021-01-13 · Updated 2024-11-26 · CVE-2021-1126

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center (FMC) (affected versions not specified)

Description: A vulnerability in the storage of proxy server credentials could allow an authenticated, local attacker to view credentials for a configured proxy server. The issue is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this by accessing the CLI of the affected software and viewing the contents of the affected files, potentially allowing them to view the credentials used to access the proxy server.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Insufficiently Protected Credentials

Weakness Enumeration

CWE-256

CWE-732

CWE-522

Related Identifiers

BDU:2021-00299

CVE-2021-1126

Affected Products

Cisco Firepower Management Center

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-1126 · Security Note
• https://bdu.fstec.ru/vul/2021-00299 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1126 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-infodisc-RJdktM6f · Vendor Advisory