medium6.5
CVE-2016-6420
Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain p…
Impact
Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Firesight System Software | Versions 4.10.3, 5.2.0, 5.3.0, 5.3.1, 5.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1
- http://www.securityfocus.com/bid/93204
- http://www.securitytracker.com/id/1036919
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1
- http://www.securityfocus.com/bid/93204
- http://www.securitytracker.com/id/1036919