PT-2016-6943

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center running FireSIGHT System software version 5.4.1.6 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view the Remote Storage Password...

CVE-2016-6471: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. More Information: CSCvb19366. Known Affected Releases: 5.4.1.6...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...

Cisco FireSIGHT System Software Malicious Software Detection Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpte...

Cisco Firepower Management Center and Cisco FireSIGHT System Software Malicious Software Detection Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. The vulnerability is due to the incorrect...

CVE-2016-6417

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636...

CVE-2016-6417

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636...

CVE-2016-6417

Cisco FireSIGHT System Software (4.10.2–6.1.0) and Firepower Management Center are affected by CVE-2016-6417, a Cross‑Site Request Forgery vulnerability that lets remote attackers hijack the authentication of arbitrary users. The underlying issue is CSRF in the management interfaces, enabling una...

CVE-2016-6417

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636...

CVE-2016-6420

Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467...

CVE-2016-6420

Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467...

Authorization

Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467...

CVE-2016-6420

CVE-2016-6420 affects Cisco FireSIGHT System Software used by Firepower Management Center (FMC) versions 4.10.3–5.4.0. The vulnerability is due to improper authorization checks in the FMC web framework, allowing remote authenticated users to bypass authorization and gain elevated privileges via a...

CVE-2016-6420

Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467...

CVE-2016-6417: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636...

PT-2016-6894

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 4.10.3 through 5.4.0 Description The issue allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request. Recommendations For versions 4.10.3 through...

PT-2016-6891

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 4.10.2 through 6.1.0 Firepower Management Center affected versions not specified Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to...

CVE-2016-6420: Exposure of Sensitive Information to an Unauthorized Actor

Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467...

Cisco Firepower Management Center and FireSIGHT System Cross-Site Request Forgery Vulnerability

Cisco Firepower Management Center and FireSIGHT System Software are both management center software from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Firepower Management Center and FireSIGHT System Software. A remote attacker could exploit this vulnerability to perform...