critical9.1
CVE-2016-6394
Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web ses…
Impact
Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Firesight System Software | Versions 5.2.0, 5.2.0.1, 5.2.0.2, 5.2.0.3, 5.2.0.4, 5.2.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc
- http://www.securityfocus.com/bid/92825
- http://www.securitytracker.com/id/1036757
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc
- http://www.securityfocus.com/bid/92825
- http://www.securitytracker.com/id/1036757