Lucene search

PRIOn knowledge basePRION:CVE-2015-6419

HistoryDec 12, 2015 - 4:59 p.m.

Design/Logic Flaw

2015-12-1216:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

40.4%

JSON

Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.

CPENameOperatorVersion
firesight_system_softwareeq5.4.0
firesight_system_softwareeq5.2.0
firesight_system_softwareeq5.3.1
firesight_system_softwareeq4.10.3
firesight_system_softwareeq5.3.0

Name	Operator	Version
firesight_system_software	eq	5.4.0
firesight_system_software	eq	5.2.0
firesight_system_software	eq	5.3.1
firesight_system_software	eq	4.10.3
firesight_system_software	eq	5.3.0

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-fmc

www.securityfocus.com/bid/79033

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

40.4%

JSON

Related for PRION:CVE-2015-6419