Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote malicious users to enumerate valid usernames by measuring timing differences, aka Bug ID CSCuy41615.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cisco firesight system software _6.1.0 |