A vulnerability in the Cisco FireSIGHT Management Center could allow an authenticated, remote malicious user to view sensitive information from the underlying operating system. The vulnerability is due to improper sanitation of user-supplied input. An attacker could exploit this vulnerability by sending special GET requests to a vulnerable device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-fmc
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cisco firesight system software 5.3.1 |
||
cisco firesight system software 4.10.3 |
||
cisco firesight system software 5.4.0 |
||
cisco firesight system software 5.2.0 |
||
cisco firesight system software 5.3.0 |