CVE-2015-6419

2015-12-1216:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cisco

firesight

management center

file reading

remote authentication

vulnerability

cve-2015-6419

nvd

6.4 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

41.4%

JSON

Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.

CPENameOperatorVersion
cisco:firesight_system_softwarecisco firesight system softwareeq5.4.0
cisco:firesight_system_softwarecisco firesight system softwareeq5.2.0
cisco:firesight_system_softwarecisco firesight system softwareeq5.3.1
cisco:firesight_system_softwarecisco firesight system softwareeq4.10.3
cisco:firesight_system_softwarecisco firesight system softwareeq5.3.0

CPE	Name	Operator	Version
cisco:firesight_system_software	cisco firesight system software	eq	5.4.0
cisco:firesight_system_software	cisco firesight system software	eq	5.2.0
cisco:firesight_system_software	cisco firesight system software	eq	5.3.1
cisco:firesight_system_software	cisco firesight system software	eq	4.10.3
cisco:firesight_system_software	cisco firesight system software	eq	5.3.0