CVE-2015-6335

2015-10-2502:59:00

CWE-264

[email protected]

web.nvd.nist.gov

cisco

firesight

management center

cve-2015-6335

policy implementation

cisco vulnerability

remote authenticated administrators

linux commands

root access

cscuw12839

7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

52.0%

JSON

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.

CPENameOperatorVersion
cisco:firesight_system_softwarecisco firesight system softwareeq6.0.0
cisco:firesight_system_softwarecisco firesight system softwareeq5.4.0.4
cisco:firesight_system_softwarecisco firesight system softwareeq5.3.1.7

CPE	Name	Operator	Version
cisco:firesight_system_software	cisco firesight system software	eq	6.0.0
cisco:firesight_system_software	cisco firesight system software	eq	5.4.0.4
cisco:firesight_system_software	cisco firesight system software	eq	5.3.1.7