6.8
CVSSv2

CVE-2015-6419

Published: 12/12/2015 Updated: 28/11/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
VMScore: 605
Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N

Vulnerability Summary

A vulnerability in the Cisco FireSIGHT Management Center could allow an authenticated, remote malicious user to view sensitive information from the underlying operating system. The vulnerability is due to improper sanitation of user-supplied input. An attacker could exploit this vulnerability by sending special GET requests to a vulnerable device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-fmc

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firesight system software 5.3.1

cisco firesight system software 4.10.3

cisco firesight system software 5.4.0

cisco firesight system software 5.2.0

cisco firesight system software 5.3.0

Vendor Advisories

A vulnerability in the Cisco FireSIGHT Management Center could allow an authenticated, remote attacker to view sensitive information from the underlying operating system The vulnerability is due to improper sanitation of user-supplied input An attacker could exploit this vulnerability by sending special GET requests to a vulnerable device Cisc ...